Senior Security Analyst, Compliance

📋 Description

• Lead and mature the information security risk management program, including risk identification
• Develop and report security risk and compliance metrics that provide clear visibility into program
• Advance the existing security assessment and reporting program while coordinating audits and
• Lead the use of the HITRUST Common Security Framework to assess, measure, and maintain the maturity
• Manage the information security risk register and coordinate the remediation of identified risks
• Perform information security and information technology risk assessments and apply appropriate

🎯 Requirements

• Bachelor’s degree in cybersecurity or a related discipline, combined with relevant professional
• 5+ years of professional experience in information security.
• 3+ years of experience managing information security audit activities, either as an assessor
• Hands-on experience as an information security professional, ideally within a healthcare
• Direct experience with healthcare security and HITRUST requirements.
• Proven ability to create and implement structured processes for ongoing security and compliance

🎁 Benefits

• Remote position based in the United States.
• Limited travel, scheduled according to business needs.
• Opportunity to help shape and mature an information security GRC program.
• Exposure to HITRUST, SOC 2, healthcare security, risk management, and regulatory compliance
• Cross-functional collaboration with IT, Privacy, Compliance, business stakeholders, and external
• Opportunity to establish scalable security governance and compliance processes within a healthcare