Healthcare Security Analyst: VMP, MSSP & Compliance

Innovative Hematology, Inc.; Indianapolis (IN); On-site; USD 70,000 - 110,000; Full time

Job summary

Innovative Hematology, Inc. in Indianapolis, IN, seeks an experienced Security Analyst to join our IT team. This role bridges tactical cybersecurity defense with regulatory oversight to safeguard e-PHI and hybrid cloud systems.

Key duties include administering the VMP, triaging security alerts, coordinating audits, and driving security awareness training across IT verticals, with on-site presence at our Indianapolis center.

Qualifications

• 3–5 years of progressive experience in Cybersecurity operations, or a related field. Healthcare IT experience strongly preferred.
• Minimum Associate's degree in related field; Bachelor's degree preferred.
• All IHI employees are expected to enable multi-factor authentication via personal devices.

Responsibilities

• Administer the enterprise Vulnerability Management Program (VMP) across endpoints, servers, databases, and hybrid cloud infrastructure.
• Coordinate vulnerability scanning schedules, analyze scan data, and validate findings against threat intelligence and risk.
• Remediation governance: work with IT Operations and Cloud & DevOps to prioritize and validate remediation within SLAs.
• MSSP: serve as primary technical POC, manage alert escalations and SLA performance.
• Compliance & audits: align safeguards with HIPAA, URAC, NIST CSF, PCI DSS; coordinate audit evidence across IT verticals.
• Access & privilege audits: review IAM and least privilege adherence.
• Security awareness: administer monthly security training and simulated phishing campaigns.

Skills

Cybersecurity operations

Regulatory compliance

Incident response

Team collaboration

Education

Associate degree

Bachelor's degree preferred

Tools

EDR tools

Vulnerability scanners

NIST CSF

Job description

Innovative Hematology, Inc. in Indianapolis, IN, seeks an experienced Security Analyst to join our IT team. This role bridges tactical cybersecurity defense with regulatory oversight to safeguard e-PHI and hybrid cloud systems.

Key duties include administering the VMP, triaging security alerts, coordinating audits, and driving security awareness training across IT verticals, with on-site presence at our Indianapolis center.