Lead Security & Compliance Analyst

📋 Description

• Own end-to-end audits (SOC 1/2, HITRUST) from prep to auditor coordination.
• Develop and maintain security policies aligned with HIPAA, HITRUST, SOC.
• Manage compliance automation platforms; monitor controls; address customer security requests.
• Coordinate with external auditors, vendors, and customers for reviews and assessments.
• Lead third-party risk assessments; respond to customer security questionnaires.
• Deliver security awareness and compliance training; evaluate internal controls.

🎯 Requirements

• 4+ years of combined security compliance, GRC, and hands-on security roles.
• Proven experience supporting SOC 1, SOC 2, and/or HITRUST audits.
• Strong understanding of HIPAA Security and Privacy requirements.
• Hands-on vulnerability management, security scanning, remediation workflows.
• Familiarity with AWS security concepts (IAM, logging, monitoring, controls).
• Ability to create clear policies, remediation plans, and technical docs.

🎁 Benefits

• Equity incentive plan
• Comprehensive medical, dental, and vision coverage
• Employer-funded HSA contributions
• 401(k) retirement plan
• Remote-first with office and coworking space options
• Flexible vacation and professional development stipend