Healthcare Information Security & Risk Analyst

Fortified Health Security; Exton (PA); On-site; USD 65,000 - 90,000; Full time

Job summary

Fortified Health Security in Exton, PA seeks a Security Analyst to support risk assessments for healthcare clients. Under general direction, you will assist senior team members, deliver risk evaluation reports, and ensure high-quality service.

You will work with controls such as EDR/XDR/MDR, SIEM, and firewalls, coordinating across engagements and maintaining knowledge of HIPAA and NIST CSF. A bachelor's degree and 2+ years of experience are required.

Qualifications

• Bachelor's degree from a four-year college or university or combination of education and experience.
• 2+ years’ experience in information security consulting and risk assessments.
• Information security experience in a hospital setting highly preferred.

Responsibilities

• Support senior team members and project leads to ensure clear communication and timely delivery.
• Provide assessment services to clients in in-person and virtual settings.
• Support the creation and delivery of risk assessment reports based on evaluations of controls and workflows.
• Deliver high-quality, professional services when guiding clients.
• Contribute to the maintenance and improvement of Fortified services and deliverables.
• Maintain knowledge of healthcare information security laws and industry frameworks (HIPAA, CISA CPGs, NIST CSF 2.0).
• Understand how technical controls (EDR/XDR/MDR, SIEM, firewalls) operate within an environment.

Skills

Risk assessment

Information security

Healthcare security

Consultative mindset

Project management

Team collaboration

Analytical thinking

Security frameworks

Education

Bachelor's degree

Healthcare experience preferred

Tools

EDR/XDR/MDR

SIEM

Firewalls

Cloud security

Job description

Fortified Health Security in Exton, PA seeks a Security Analyst to support risk assessments for healthcare clients. Under general direction, you will assist senior team members, deliver risk evaluation reports, and ensure high-quality service.

You will work with controls such as EDR/XDR/MDR, SIEM, and firewalls, coordinating across engagements and maintaining knowledge of HIPAA and NIST CSF. A bachelor's degree and 2+ years of experience are required.