GRC Security Analyst

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Curana Health

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

🤝 B2B

⚕️ Healthcare Insurance

Healthcare • B2B • Healthcare Insurance

Curana Health is a healthcare provider focused on senior primary care and on-site clinical services in skilled nursing and senior living communities. The company partners with operators, payors, and Medicare Advantage plans to implement value-based care models, offering physician-led care teams, medical director services, care coordination (including RPM and APCM), behavioral health, and palliative care. Curana emphasizes reducing hospital readmissions, falls, and polypharmacy while improving resident satisfaction through integrated, community-based care supported by technology and payor partnerships.

📋 Description

• Conduct security risk assessments and document risks, control gaps, and recommended next steps • Support improvements to the Governance, Risk, and Compliance program • Maintain security policies, standards, procedures, and guidelines • Coordinate audits and assessments, including evidence collection, control validation, documentation, and remediation tracking • Map security controls to HIPAA, SOC 2, NIST, CIS, CMS, and URAC frameworks • Support compliance monitoring and regulatory readiness initiatives • Maintain risk registers, issue logs, corrective action plans, compliance metrics, and governance documentation • Partner with technology teams to address vulnerabilities, control deficiencies, and compliance gaps • Participate in risk intake, assessment, prioritization, escalation, and ongoing monitoring • Support third-party risk management and vendor security reviews

🎯 Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Healthcare Informatics, or a related field; equivalent experience will also be considered • 2–5 years of experience in GRC, information security, risk management, audit, compliance, cybersecurity, or a related function • Experience supporting risk assessments, compliance reviews, audits, control testing, or governance activities • Experience working in a regulated industry or compliance-driven environment • Knowledge of the HIPAA Security Rule • Understanding of information security governance, risk management, and compliance concepts • Strong analytical, organizational, and problem-solving skills • Excellent written and verbal communication skills • Ability to manage multiple priorities and deadlines in a fast-paced environment • Visa sponsorship is unavailable