Lead Security & Compliance Analyst
New
P
Parachute HealthHealth Tech
Remote-firstFull-TimeLead
Salary$80,000 - $130,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 4+ years combined experience across security compliance/GRC and hands-on technical security
- Required Skills
- AWSPythonBashHIPAA
Requirements
- 4+ years of combined experience in security compliance/GRC and hands-on technical security.
- Direct experience supporting SOC 1/SOC 2 and/or HITRUST audit cycles.
- Working knowledge of HIPAA Security and Privacy requirements.
- Hands-on experience with vulnerability scanning, remediation, and interpreting technical security findings (CVEs, misconfigurations).
- Familiarity with AWS security concepts, including IAM, security groups, logging, and WAF.
- Strong technical writing skills for creating policies, procedures, and clear remediation tickets.
- Experience with compliance automation platforms (e.g., Drata, Vanta) is preferred.
- Background in healthcare or other regulated industries is preferred.
- Relevant certifications (CISSP, CISA, CRISC, HITRUST CCSFP, or CISM) are preferred.
- Experience with SIEM tools, log analysis, and forensic fraud investigations is a plus.
Responsibilities
- Own SOC 1, SOC 2, HITRUST CSF, and HITRUST AI audits end-to-end, including scoping, evidence collection, and auditor coordination.
- Develop, implement, and maintain security and compliance policies and procedures aligned with HIPAA, HITRUST, and SOC frameworks.
- Manage compliance automation platforms and respond to customer security assessments and questionnaires.
- Execute vulnerability management programs, including scanning, triage, and driving remediation with engineering teams.
- Investigate and remediate security findings within AWS (EKS, WAF, IAM) and the broader SaaS stack.
- Conduct log analysis and support incident response, forensic investigations, and legal/eDiscovery data extraction.
- Automate evidence collection and security tooling using scripting languages like Python or Bash.
View Full Description & ApplyYou'll be redirected to the employer's site
