Security Compliance Analyst, Chartis
$60-69k
Advisory services for the healthcare industry
Open for applications
Advisory services for the healthcare industry
501-1000 employees
Open for applications
$60-69k
501-1000 employees
Company mission
To improve healthcare and address critical industry priorities like health equity, practitioner burnout, and rural health.
Role
Who you are
- Bachelor's degree in Information Technology, Cybersecurity, or a related field (or equivalent experience)
- 2+ years of experience in security compliance, risk management, or information security
- Strong understanding of common security frameworks and regulations (e.g., NIST, ISO 27001, SOC 2, HiTrust, GDPR)
- Familiarity with common security technologies and practices (e.g., encryption, firewalls, intrusion detection)
- Experience with auditing tools, vulnerability management, controls testing, and risk assessment methodologies
- Excellent analytical, problem-solving, and communication skills
- Ability to work independently, prioritize tasks, and meet deadlines
- Relevant certifications (e.g., CISM, CISA, CISSP, or equivalent) are a plus
- Experience with security monitoring tools and software (e.g. Splunk Cloud, LogRhythm, Azure Sentinel, CrowdStrike, Sentinel One, Carbon Black)
- Knowledge of cloud security (AWS, Azure, etc.) and cloud compliance frameworks
- Familiarity with data privacy laws and regulations (e.g., CCPA, GDPR)
What the job involves
- The Security Compliance Analyst will be responsible for ensuring that our company meets all regulatory requirements related to security, privacy, and data protection
- This role involves working closely with various departments, identifying risks, developing strategies, and helping maintain compliance with internal and external security standards
- Assist in maintaining compliance with industry security standards and regulations such as HIPAA, SOC 2, ISO 27001, & HITRUST
- Conduct regular internal and external audits and assessments to identify security risks, gaps, and vulnerabilities in systems, processes, and controls
- Develop and maintain security policies, procedures, and documentation
- Work with IT teams to monitor and enforce compliance with security protocols and best practices
- Track, report, and resolve security compliance issues, providing guidance, recommendations, and treatment plans to mitigate risks
- Assist in preparing for and managing external audits, assessments, and certifications
- Collaborate with legal and privacy teams to ensure all regulatory and privacy requirements are met and kept updated
- Stay up to date on industry trends, emerging regulations, and best practices in security and compliance
- Assist with providing training and awareness to employees on security and compliance matters
- Perform risk assessments for new systems, services, and applications
- Assist in managing incident response processes related to security and compliance violations or incidents
Our take
Chartis is a healthcare consultancy group that works with providers, payers, investors, technology and retail companies. It helps these organisations to devise strategies and operating models that contribute to reshaping healthcare for the better.
The company addresses challenges surrounding financial sustainability, digital transformation, health equity and value-based care. With more than 2 decades of experience consulting for US healthcare services, Chartis has managed to keep pace with digital innovations and emerging problems.
Part of this ability stems from a series of acquisitions including that of healthcare payment company Healthscape and medical staff transformation service Greeley. As digitisation within the healthcare industry accelerates, Chartis has grown and evolved, and its 2024 majority investment from Blackstone will help to maintain this pace of growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company HQ
River North, Chicago, IL
Leadership
Ken Graboys
(CEO)Previously Senior Partner at CSC Healthcare/APM, Consultant at Telesis and was an Aid Worker for the Peace Corp in the mid-80s.
Ethan Arnold
(Managing Director)Previously Partner at CSC Healthcare / APM and was a consultant at Coopers & Lybrand Consulting for helathcare.
Christopher Regan
(Managing Director)Previously a Director at APM Incorporated.
Share this job
View 2 more jobs at Chartis