Information Security Analyst

The Role We are looking foran Information Security Analyst Compliance to primarily strengthen our practice towards compliances such as HIPAA, HITRUST,etc. and ensure highest levels of security around sensitive data. Identifying new risks and performing risk assessments. Performing continuous gap analysis. Auditing the applications, configurations, and internal practices against standards such as HIPAA, HITRUST etc. Providing advice and implementing forward-thinking information security policies, procedures, and standards. Assisting several teams (internal and external) with best practicesand security consultations. Supporting with other information security activities as assigned. Ensuring the organizational compliance during audits and certification efforts. Requirements: Demonstrated experience in implementing and maintaining security standards such as HIPAA, HITRUST, SOC2, ISO 27001 etc. Ability to understand and interpret legal, regulatory, and contractual compliance requirements. Experience in InfoSec policy creation and documentation. Ability to understand technology and pertaining risks. Knowledge on IT, Servers, SDLC, Database, etc. Experience working with / securing cloud-based applications is an add-on. 2+ years of experience. Excellent written and verbal communication skills. Relevant Security Certifications will be a good add-on. The Role We are looking foran Information Security Analyst Compliance to primarily strengthen our practice towards compliances such as HIPAA, HITRUST,etc. and ensure highest levels of security around sensitive data. Identifying new risks and performing risk assessments. Performing continuous gap analysis. Auditing the applications, configurations, and internal practices against standards such as HIPAA, HITRUST etc. Providing advice and implementing forward-thinking information security policies, procedures, and standards. Assisting several teams (internal and external) with best practicesand security consultations. Supporting with other information security activities as assigned. Ensuring the organizational compliance during audits and certification efforts. Requirements: Demonstrated experience in implementing and maintaining security standards such as HIPAA, HITRUST, SOC2, ISO 27001 etc. Ability to understand and interpret legal, regulatory, and contractual compliance requirements. Experience in InfoSec policy creation and documentation. Ability to understand technology and pertaining risks. Knowledge on IT, Servers, SDLC, Database, etc. Experience working with / securing cloud-based applications is an add-on. 2+ years of experience. Excellent written and verbal communication skills. Relevant Security Certifications will be a good add-on.