IT Support and Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee compliance tasks related to HITRUST, HIPAA, and SOC 2 under the direction of the CTO.

• Create and revise internal policies and security documentation.

• Perform annual risk assessments and collect evidence for third-party audits.

• Monitor security practices and incidents while leading mitigation efforts.

• Implement employee onboarding and offboarding procedures, which include system access, device setup, and deprovisioning.

• Administer internal tools, manage access controls, oversee device management, and conduct vendor reviews.

• Assist with documentation related to device management and vendor reviews.

• Ensure compliance documentation for GCP infrastructure is maintained in collaboration with the CTO.

• Aid in incident response and change management processes.

• Collaborate closely with the CTO to ensure systems are secure, access controls are stringent, and operations are audit-ready.

⛳️ Requirements

• A minimum of 3–5 years of experience in IT support, security, compliance, or a similar field.

• Must possess experience with SOC 2 and HITRUST audits.

• Familiarity with audits, security assessments, or vendor risk management programs.

• Experience in managing access controls, SaaS tools, or overseeing device setup/offboarding.

• Self-motivated individual with strong time management skills, capable of working independently in a fast-paced, uncertain environment.

• Adaptable and resourceful, ready to take on various roles and responsibilities.

• Proactive problem-solver with a focus on action and continuous improvement.

• Experience in a healthcare or B2B SaaS setting is a plus.

• Knowledge of GCP, Vanta, or comparable security and compliance automation tools is advantageous.

• Familiarity with MDM or device management tools is beneficial.

• Exposure to vendor risk management or third-party security evaluations is a plus.

🏝️ Benefits

• Part-time position, approximately 20 hours per week.

• Fully remote work environment.

• Compensation may be increased for candidates located in higher-cost labor markets.

• Valuable exposure to HIPAA, HITRUST, and SOC 2 within a healthcare SaaS startup.

• Opportunities for long-term progression and growth within the role.