Information Security Analyst

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Evaluate internal security systems and associated controls to ensure compliance with annual audits, healthcare regulations, and corporate ethical standards.

• Aid in the planning and execution of security training and educational programs for employees.

• Collaborate with departments to guarantee that operational security measures are established and function according to compliance requirements.

• Create work plans, roadmaps, meeting schedules, agendas, meeting notes, and follow-up actions for security initiatives.

• Monitor and manage daily, monthly, quarterly, and annual security compliance tasks and controls.

• Conduct quarterly access reviews, gather and store reporting data, identify discrepancies, and assist in remediation efforts.

• Lead, oversee, and document procedures for third-party vendors and respond to client security questionnaires.

• Support audit processes and manage the collection and oversight of control evidence.

• Examine real-time and historical reports for any security or compliance violations.

• Keep track of security resources to identify emerging cyber threats.

• Enforce and support physical security protocols.

• Recognize and implement improvements related to security.

• Offer technical expertise across information security and ensure that systems and networks are securely designed, developed, deployed, and maintained.

• Drive departmental KPI initiatives and manage roadmap tracking.

• Oversee and administer annual third-party security evaluations and client compliance requests.

• Investigate and report on security products, cyber technologies, and threats.

• Perform additional duties as assigned.

⛳️ Requirements

• Bachelor’s degree in Computer Science, IT, Business, or equivalent work or educational experience.

• Security-related certifications such as Security+, CEH, or Azure.

• Preferred: 1–2 years of experience in IT security and compliance.

• Previous experience in the healthcare industry is advantageous.

• Familiarity with Microsoft Azure cloud, Microsoft O365, Cortex, Qualys, and DUO 2FA.

• Knowledge of IT systems and networking.

• Proficient in computer applications and basic office software, including MS Office, Word, Excel, and Outlook.

• Consistent and reliable attendance.

• Experience managing servers, particularly in virtualized environments.

• Understanding of HIPAA and relevant compliance frameworks, including SOC2 and HITRUST.

• Strong project management skills and technical troubleshooting abilities.

• Excellent writing and documentation capabilities.

• Ability to communicate security concepts to both technical and non-technical personnel.

• Capable of managing larger projects while addressing daily responsibilities.

🏝️ Benefits

• Full-time employment.

• Opportunities for professional growth and development.

• Access to tools, resources, and support for career advancement.

• Flexible, family-oriented work environment.

• Support for maintaining work-life balance.

• Option for remote work.