Senior Information Security Analyst

🔥 17 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

CareMetx, LLC

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

🏥 Healthcare

⚕️ Healthcare Insurance

Consulting • Healthcare • Healthcare Insurance

CareMetx, LLC is a company that specializes in transforming patient access to specialty therapeutics by reducing the time to therapy. They offer a digital Hub service that addresses emotional, financial, and clinical barriers for patients, aiming to improve treatment timelines and ongoing therapy use. CareMetx provides high-touch support and utilizes advanced technology to offer solutions for access, affordability, and adherence, benefiting both patients and healthcare providers. They partner with specialty pharmaceutical brands, healthcare providers, and hospital systems to enhance patient outcomes.

📋 Description

• Monitor GRC platforms for failing or at-risk technical controls across SOC 2, HIPAA, and NIST CSF 2.0 • Evaluate controls, determine remediation needs and priorities, create tickets, and track remediation to completion • Document exceptions, accepted risks, and false positives • Monitor vulnerability and cloud security alerts, triage findings, assign severity, and guide remediation • Build and operate vulnerability management processes, including KPIs, metrics, backlog analysis, and trend reporting • Verify workstation configurations against adopted CIS Benchmarks and coordinate remediation • Respond to managed security operations provider calls and escalations as a first-line responder • Participate in incident investigation, evidence collection and preservation, containment coordination, and post-incident reviews • Maintain the Incident Response Plan and facilitate tabletop exercises • Coordinate annual external penetration testing and verify remediation of identified gaps • Support third-party risk management, technical questionnaires, customer RFPs, and critical vendor security research • Assist with SOC 2 and customer audit evidence collection and preparation • Monitor unauthorized SaaS and AI-tool usage, investigate flagged activity, tune monitoring alerts, and escalate material cases to the CISO

🎯 Requirements

• 7+ years in information security, security operations, vulnerability management, GRC, or a closely related role • Broad information technology experience in infrastructure/operations or application development • Experience participating in security incident response, including evidence collection and preservation and coordination with a managed security operations or managed detection and response provider • Hands-on experience with a GRC / compliance-automation platform and vulnerability scanning tools • Working knowledge of SOC 2, the HIPAA Security Rule, NIST CSF 2.0, and CIS Benchmarks • Working knowledge of public cloud security configuration and a widely used enterprise productivity suite • Ability to read application dependency manifests, infrastructure-as-code, and cloud configurations • Experience designing and implementing repeatable, scalable processes • Ability to explain technical risk in business terms to leadership, legal partners, and non-security technology groups • Willingness and ability to participate in a shared on-call rotation for after-hours security escalations • Flexible schedule and hours • Some travel may be required • MS or bachelor's degree in Computer Science/MIS or a similar technical field is preferred • Healthcare or other regulated-industry experience is preferred • CISSP certification is listed in the qualifications

🏖️ Benefits

• Full-time employment • Remote work within the United States • Shared on-call rotation compensation implied by role participation (no separate amount stated) • Reasonable accommodations for individuals with disabilities • Equal employment opportunity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume