Healthcare IT GRC Security Analyst

Curana Health; United States; Remote; USD 117,000 - 143,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement savings plan

Paid time off

Job summary

Curana Health is seeking an IT Governance, Risk, and Compliance Analyst to join our IT Security and Governance team. You will help strengthen our security and compliance programs by supporting risk management, audit readiness, policy administration, control monitoring, and regulatory compliance activities.

You will work closely with IT, Security, Privacy, Compliance, Legal, and business teams to identify risks and help Curana Health meet security expectations as we grow.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Healthcare Informatics, or a related field; equivalent experience will be considered.
• 2–5 years of experience in GRC, information security, risk management, audit, compliance, cybersecurity, or a related function.
• Experience supporting risk assessments, compliance reviews, audits, control testing, or governance activities.
• Experience working in a regulated industry or compliance-driven environment.
• Knowledge of the HIPAA Security Rule.
• Understanding of information security governance, risk management, and compliance concepts.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and deadlines in a fast-paced environment.

Responsibilities

• Conduct security risk assessments and document risks, control gaps, and recommended next steps.
• Support ongoing improvements to Curana Health’s Governance, Risk, and Compliance program.
• Maintain security policies, standards, procedures, and guidelines.
• Coordinate audit and assessment activities, including evidence collection, control validation, documentation, and remediation tracking.
• Map security controls to frameworks including HIPAA, SOC 2, NIST, CIS, CMS, and URAC.
• Support compliance monitoring activities and regulatory readiness initiatives.
• Maintain risk registers, issue logs, corrective action plans, compliance metrics, and governance documentation.
• Partner with technology teams to address security vulnerabilities, control deficiencies, and compliance gaps.
• Participate in risk intake, assessment, prioritization, escalation, and ongoing monitoring activities.
• Support third-party risk management and vendor security review processes.

Skills

Analytical thinking

Communication

Attention to detail

Collaborative

Education

Bachelor’s degree in Information Security/ Cybersecurity/ IT/ Healthcare Informatics

Tools

HIPAA Security Rule

SOC 2

NIST CSF

CIS Controls

CMS

URAC

HITRUST

ISO 27001

Job description

Curana Health is seeking an IT Governance, Risk, and Compliance Analyst to join our IT Security and Governance team. You will help strengthen our security and compliance programs by supporting risk management, audit readiness, policy administration, control monitoring, and regulatory compliance activities.

You will work closely with IT, Security, Privacy, Compliance, Legal, and business teams to identify risks and help Curana Health meet security expectations as we grow.