Senior Information Security Analyst

🕒 Outubro 30

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 10%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 13 dias.
• As vagas desta empresa costumam ser preenchidas em 21 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

CareMetx, LLC

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

💼 Consultoria

🏥 Saúde

⚕️ Seguro de Saúde

Consulting • Healthcare • Healthcare Insurance

CareMetx, LLC é uma empresa especializada em transformar o acesso dos pacientes a terapias especiais, reduzindo o tempo para o início do tratamento. Eles oferecem um serviço de Hub digital que aborda barreiras emocionais, financeiras e clínicas para os pacientes, visando melhorar os prazos de tratamento e o uso contínuo das terapias. A CareMetx proporciona suporte de alta qualidade e utiliza tecnologia avançada para oferecer soluções de acesso, acessibilidade e adesão, beneficiando tanto os pacientes quanto os prestadores de serviços de saúde. Eles fazem parceria com marcas farmacêuticas especializadas, prestadores de serviços de saúde e sistemas hospitalares para melhorar os resultados dos pacientes.

Descrição

• Monitor GRC platforms for failing or at-risk technical controls across SOC 2, HIPAA, and NIST CSF 2.0 • Evaluate controls, determine remediation needs and priorities, create tickets, and track remediation to completion • Document exceptions, accepted risks, and false positives • Monitor vulnerability and cloud security alerts, triage findings, assign severity, and guide remediation • Build and operate vulnerability management processes, including KPIs, metrics, backlog analysis, and trend reporting • Verify workstation configurations against adopted CIS Benchmarks and coordinate remediation • Respond to managed security operations provider calls and escalations as a first-line responder • Participate in incident investigation, evidence collection and preservation, containment coordination, and post-incident reviews • Maintain the Incident Response Plan and facilitate tabletop exercises • Coordinate annual external penetration testing and verify remediation of identified gaps • Support third-party risk management, technical questionnaires, customer RFPs, and critical vendor security research • Assist with SOC 2 and customer audit evidence collection and preparation • Monitor unauthorized SaaS and AI-tool usage, investigate flagged activity, tune monitoring alerts, and escalate material cases to the CISO

🎯 Requisitos

• 7+ years in information security, security operations, vulnerability management, GRC, or a closely related role • Broad information technology experience in infrastructure/operations or application development • Experience participating in security incident response, including evidence collection and preservation and coordination with a managed security operations or managed detection and response provider • Hands-on experience with a GRC / compliance-automation platform and vulnerability scanning tools • Working knowledge of SOC 2, the HIPAA Security Rule, NIST CSF 2.0, and CIS Benchmarks • Working knowledge of public cloud security configuration and a widely used enterprise productivity suite • Ability to read application dependency manifests, infrastructure-as-code, and cloud configurations • Experience designing and implementing repeatable, scalable processes • Ability to explain technical risk in business terms to leadership, legal partners, and non-security technology groups • Willingness and ability to participate in a shared on-call rotation for after-hours security escalations • Flexible schedule and hours • Some travel may be required • MS or bachelor's degree in Computer Science/MIS or a similar technical field is preferred • Healthcare or other regulated-industry experience is preferred • CISSP certification is listed in the qualifications

🏖️ Benefícios

• Full-time employment • Remote work within the United States • Shared on-call rotation compensation implied by role participation (no separate amount stated) • Reasonable accommodations for individuals with disabilities • Equal employment opportunity

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo