Healthcare Third-Party Risk Analyst

Fortified Health Security; Exton (PA); On-site; USD 70,000 - 90,000; Full time

Job summary

Fortified Health Security is seeking a Third Party Risk Analyst to ensure successful processing and delivery of TPRM assessments for clients. The role applies information security frameworks to identify third-party risk, with a focus on protecting patient health information and regulatory compliance.

The position requires knowledge of HIPAA, HITECH, and NIST CSF 2.0, plus experience in producing risk reports and guiding clients on remediation and governance tasks.

Qualifications

• Bachelor's degree or equivalent education/experience.
• 1+ years IT support in enterprise environment.
• Knowledge of HITRUST CSF, NIST CSF 2.0, ISO 27001 and SOC 2 Type 2.
• HIPAA Security Rule familiarity preferred.
• Experience in healthcare information security highly preferred.

Responsibilities

• Ensure timely delivery of TPRM assessment reports and other deliverables.
• Create reports reflecting findings for technical and executive audiences.
• Communicate with clients and third parties regarding TPRM services and support.
• Directly manage and oversee the delivery of TPRM services for assigned clients.
• Maintain knowledge of healthcare information security laws/regulations and industry frameworks (HIPAA, HITECH, NIST CSF 2.0).
• Contribute to maintenance of client-specific and internal TPRM policies and procedures.

Skills

Analytical mindset

Detail oriented

Communication skills

Team player

Self-driven

Problem solving

Presentation skills

Security concepts

Network concepts

Education

Bachelor's degree or equivalent

1+ years IT support / security experience

HITRUST CSF / NIST CSF 2.0 / ISO 27001 / SOC 2 Type 2

HIPAA Security Rule knowledge

Healthcare information security experience

Job description

Fortified Health Security is seeking a Third Party Risk Analyst to ensure successful processing and delivery of TPRM assessments for clients. The role applies information security frameworks to identify third-party risk, with a focus on protecting patient health information and regulatory compliance.

The position requires knowledge of HIPAA, HITECH, and NIST CSF 2.0, plus experience in producing risk reports and guiding clients on remediation and governance tasks.