Security Compliance Analyst, Crossover Health

• The ideal candidate will thrive in an environment where every day brings opportunities to learn new technologies, work on projects small and large
• 2+ years experience in an IT, security, compliance, audit or development role
• Internal audit and/or compliance experience
• Knowledge of core security controls and systems such as risk analysis quantification and points of escalation
• Strong understanding of information security principles, including risk assessment and mitigation strategies
• A broad understanding of Information Security technologies, programs and systems
• Coordinate large scale projects such as annual security audits
• Demonstrated excellence in organizing, prioritizing, and multitasking in a high paced environment
• Excellent verbal and written communication skills to speak across multiple audiences
• Excellent analytical and problem-solving skills in the context of information security
• Ability to work independently, as well as in a team environment
• Continuously sought and embraced opportunities to build upon your skills and knowledge
• Strong organizational and problem solving skills

Desirable

• This role is critical to Crossover’s security and compliance efforts
• This role will focus on Third-Party Risk Management and will be responsible for performing annual and new vendor risk reviews, and supporting internal and external audits including SOC2 and HITRUST Certifications
• Perform security vendor risk assessments to evaluate third-party security risks, ensuring all vendors meet Crossover Health’s security standards
• Assist third party security audits including HITRUST and SOC2 by collecting and reviewing evidence, supporting internal control owners, and coordinating with assessors
• Serve as an advisor to TechOps, DevOps, Engineering, HR, and other business units to ensure teams are aware of, and understand, compliance requirements that impact their department
• Monitor the organization's Security risks, risk registers, and treatment plans. Coordinate with business stakeholders and auditors to perform point-in-time and annual security risk assessments
• Monitor compliance with Crossover Health’s policies and procedures
• Assist with internal security risk assessments and communicate findings to stakeholders
• Identify policy and process improvement opportunities, develop recommendations, and communicate with stakeholders collaboratively
• Respond to customer security questionnaires
• Provide high quality written and verbal reports as required
• Perform other duties as assigned