Information Technology Security Analyst
📍 Location: Remote US
🏢 Industry: Hospital and Healthcare
💼 Work Setting: Remote

Are you passionate about cybersecurity, risk management, compliance, and protecting sensitive information within complex enterprise environments?
We are seeking an IT Security Analyst II to support enterprise security operations, compliance initiatives, risk assessments, vulnerability management, and audit programs. This role combines hands-on cybersecurity administration with governance, risk, and compliance responsibilities to ensure organizational systems remain secure, compliant, and resilient.
The ideal candidate brings expertise in security operations, SIEM monitoring, vulnerability management, regulatory compliance, risk assessments, audits, incident response, and security governance while collaborating with technical and business stakeholders across the organization.
Role Summary
The IT Security Analyst II is responsible for protecting information systems, monitoring security events, assessing risks, supporting compliance initiatives, and participating in security audits. This position works closely with IT, compliance, operations, vendors, customers, and leadership teams to strengthen security controls and maintain regulatory readiness.

Key Responsibilities
Security Operations & Incident Management
Monitor enterprise systems and security platforms for suspicious activity.
Identify, investigate, document, and respond to security incidents.
Analyze security logs and alerts to determine potential threats.
Support incident response and remediation activities.
Ensure security controls are functioning as intended.
Areas of Focus
Security Monitoring
Security Event Analysis
Incident Response
Threat Detection
Security Operations
Security Infrastructure Administration
Configure, maintain, and support security technologies including:
SIEM Platforms
Endpoint Detection & Response (EDR)
Firewalls
VPN Solutions
IDS/IPS Platforms
Proxy Servers
Remote Access Solutions
DMZ Infrastructure
Assist with deployment and maintenance of new security controls.
Support ongoing security architecture initiatives.
Vulnerability Management
Participate in vulnerability scanning programs.
Analyze scan results and prioritize remediation efforts.
Coordinate corrective actions with infrastructure and application teams.
Verify security weaknesses have been successfully addressed.
Assist in reducing organizational risk exposure.
Responsibilities
Vulnerability Assessments
Security Testing
Risk Mitigation
Patch Validation
Remediation Tracking
Data Protection & Access Control
Implement controls to protect sensitive information.
Monitor and regulate access to critical systems and data.
Support Data Loss Prevention (DLP) initiatives.
Maintain information security safeguards.
Ensure least-privilege and access control practices are followed.
Risk Management & Security Assessments
Conduct risk assessments on applications, systems, and infrastructure.
Evaluate security controls and identify gaps.
Recommend improvements to strengthen security posture.
Participate in security reviews and technical assessments.
Support enterprise risk management initiatives.
Framework Knowledge
NIST
HITRUST
HITECH
COBIT
HIPAA
Audit & Compliance Responsibilities
Internal Security Audits
Conduct internal audits to evaluate compliance with policies and controls.
Review operational effectiveness of security procedures.
Track audit findings, remediation activities, and corrective action plans.
Maintain audit documentation and reporting records.
Support continuous audit readiness initiatives.
Audit Focus Areas
Policy Compliance
Security Controls
Process Effectiveness
Risk Management
Regulatory Compliance
External Audit Support
Support third-party assessments and compliance reviews.
Assist with customer security questionnaires and assessments.
Participate in certification and accreditation processes.
Coordinate audit activities with internal stakeholders.
Support audit evidence collection and remediation activities.
Compliance Programs
HITRUST
SOC Audits
HIPAA Assessments
Customer Security Assessments
Vendor Security Reviews
Vendor Risk Management
Support vendor security assessments and due diligence activities.
Participate in pre-engagement and annual vendor reviews.
Maintain vendor risk management documentation.
Evaluate vendor security controls and compliance posture.
Assist with contract-related security reviews.
Regulatory Compliance & Governance
Security Compliance Management
Monitor regulatory changes impacting organizational security programs.
Support compliance with healthcare and security regulations.
Assess policies, procedures, and controls against current standards.
Recommend enhancements to improve compliance and security maturity.
Coordinate activities supporting regulatory readiness.
Regulatory & Industry Standards
HIPAA
HITRUST
SOC 2
NIST
HITECH
COBIT
Policy Development & Security Awareness
Support development and maintenance of security policies.
Assist with security awareness and training initiatives.
Create security documentation, standards, and procedures.
Promote security best practices across the organization.
Improve organizational cybersecurity awareness.
Business Continuity & Risk Programs
Support development and maintenance of:
Business Impact Analysis (BIA)
Business Continuity Plans (BCP)
Disaster Recovery Plans (DR)
Risk Assessments (RA)
Security Policies & Procedures
Responsibilities
Risk Evaluation
Continuity Planning
Disaster Recovery Support
Documentation Management
Program Maintenance

Required Qualifications
Education
Preferred
Bachelor's Degree in:
Management Information Systems (MIS)
Computer Information Systems (CIS)
Information Technology
Cybersecurity
Related Technical Discipline
Equivalent experience may be considered.
Experience
Required
1-3 years of experience in:
Information Technology
Information Security
Systems Administration
Technical Support
Security Operations
Experience participating in security assessments and audits.
Experience working with security technologies and frameworks.
Technical Skills
Security Operations
SIEM
EDR
Security Monitoring
Incident Response
Log Analysis
Infrastructure Security
Windows Administration
Linux Administration
Virtualization Platforms
LAN/WAN Networking
Firewall Administration
Data Protection
Data Loss Prevention (DLP)
Access Controls
Information Security
Data Privacy
Network Security
IDS/IPS
VPN Technologies
DMZ Architecture
Proxy Services
Remote Access Security
Compliance & Governance Skills
Required Knowledge
HIPAA
HITRUST
SOC Audits
COBIT
NIST
HITECH
Responsibilities
Audit Management
Regulatory Compliance
Control Assessments
Risk Management
Security Governance
Leadership & Professional Competencies
Risk Assessment
Problem Solving
Analytical Thinking
Project Management
Communication Skills
Presentation Skills
Attention to Detail
Documentation Management
Stakeholder Collaboration
Continuous Improvement

Core Competencies
Information Security
Cybersecurity
SIEM
EDR
Incident Response
Vulnerability Management
Risk Assessment
Security Audits
HITRUST
HIPAA
SOC 2
NIST
COBIT
Network Security
DLP
IDS/IPS
Vendor Risk Management
Business Continuity
Disaster Recovery
Compliance Management

Information Technology Security Analyst

Similar Analytics Jobs

Data Analyst

UKG Scheduling Analyst

Treasury Analyst

Sr. Financial Analyst-Cost Accounting

Inventory Analyst II

Business Technical Analyst