Cybersecurity Associate

Mass Digital Health; Boston (MA); On-site; USD 87,000 - 109,000; Full time

Benefits offered by this job

Medical, vision, and dental insurance

Short-term and long-term disability

401(k) Profit Sharing Contribution

Paid Time Off and Holidays

Parental Leave

Tuition reimbursement

Job summary

Mass Digital Health in Boston, Massachusetts, seeks a Cybersecurity Analyst to join their Cybersecurity Department. The role emphasizes risk management and assurance support across products, requiring collaboration with various teams.

The ideal candidate will have 1-3 years of auditing or risk management experience and a Bachelor’s degree in a relevant field. Generous employee benefits like medical and dental insurance, 401(k), and paid time off are offered.

The estimated base salary range is $87,000–$109,000 USD.

Qualifications

• 1-3+ years of auditing or risk management experience in a highly regulated environment.
• Bachelor's degree in Management Information Systems, Accounting, or similar fields.

Responsibilities

• Coordinate stakeholders for cybersecurity assurance activities.
• Support risk management and assurance activities across products.
• Respond to customer security inquiries and questionnaires.

Skills

Auditing or risk management experience

Knowledge of compliance and operational processes

Familiarity with HITRUST, SOC2, ISO 27001

AI understanding

Education

Bachelor's degree in a relevant field

Job description

As a Cybersecurity Analyst, you will be part of our Cybersecurity Department that covers information security, privacy, and product security risks and certifications. You will report to the Cybersecurity Manager - Assurance. In this role, you will collaborate with members of InterSystems Technical Services, Managed Services, and Risk & Compliance teams to provide risk management and assurance support across InterSystems products, services, and operations.

Reporting & Collaboration

• Reports to the Cybersecurity Manager - Assurance.
• Collaborates with operational and Risk & Compliance teams to provide risk management and assurance support.

Role Scope and Assignment Model

This role focuses on assurance support activities including external audits and certifications, customer cybersecurity inquiries, internal audit program assistance, and risk assessment/control validation across products, services, and operations.

Core Responsibilities

• Coordinate across stakeholders to gather information and evidence supporting cybersecurity assurance activities.
• Maintain clear documentation of requests, responses, and remediation actions to support traceability and repeatability.
• Support risk management and assurance activities across products, services, and operations.
• Support subject matter experts in the development, implementation, and maintenance of documentation.
• Participate in Information Security Management System (ISMS) activities in alignment with ISO 27001, HITRUST, AICPA Trust Services Criteria, NIST CSF and/or other leading business and IT control frameworks.
• Coordinate the collection and provision of evidence in support of cybersecurity audits including SOC2, ISO 27001, HITRUST, and FedRAMP.
• Assist with readiness exercises in preparation for external assessments.
• Respond to customer security questionnaires and inquiries in accordance with internal control principles and business/technical knowledge.
• Conduct internal evaluations as part of the Cybersecurity internal audit function.
• Collaborate with subject matter experts at InterSystems to remediate identified deficiencies.
• Identify key risks and controls within a distributed, international organization.
• Support investigations or evidence gathering as needed in coordination with operational teams.
• Leverage AI tooling where appropriate to improve process efficiency.

Required Qualifications

• 1-3+ years of auditing or risk management experience in a highly regulated environment.
• Bachelor's degree in one of the following: Management Information Systems, Accounting, Finance/Economics, Computer Science, Business, Science, Technology, Engineering & Mathematics and/or other business field of study.

Preferred Qualifications

• Certifications such as CIPM, CISA, GSNA, CRMA, or CCSA.
• Experience and knowledge around controls with risk reporting, compliance, and operational processes within an organization as an auditor or business process specialist, including business process and IT management control.
• Familiarity with at least one of the following frameworks: HITRUST, SOC2, ISO 27001.
• Exposure to FedRAMP, NIST SP 800-53, or GovRAMP frameworks.
• AI: Demonstrate understanding of AI and how it could be used in this position.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

InterSystems is providing a current good faith estimate of the anticipated base salary range for this position depending on a variety of factors including experience, education, skills, and performance.

Other compensation may include a discretionary annual variable target incentive.

The company also provides generous employee benefits including:

• Medical, vision, and dental insurance
• Short-term and long-term disability, and life insurance
• 401(k) Profit Sharing Contribution
• Paid Time Off and Holidays
• Parental Leave
• Tuition reimbursement

The estimated base compensation range for this role is: $87,000-$109,000 USD