Remote Cyber Risk & Compliance Analyst (HIPAA & SaaS)

Cybersecurity Jobs; United States; Remote; USD 95,000 - 135,000; Full time

Benefits offered by this job

Medical

Dental

Fully remote

Job summary

PATRIOTCLAIMS LLC is seeking a Cybersecurity Risk & Compliance Analyst to strengthen operational security in a HIPAA‑regulated SaaS environment. This remote role reports to the CISO and supports risk governance, incident work, and audit readiness across the organization.

You will own security administration, run risk management, and contribute to vendor risk activities, including evidence automation in Vanta, while blending IAM, vulnerability monitoring, and cross‑functional assessments of

Qualifications

• 4–6+ years in cybersecurity risk management, GRC, or security operations roles.
• Experience running formal risk management end-to-end under a recognized framework (NIST RMF/ISO 27001/NIST CSF).
• Experience with identity providers and SSO (Google Workspace, Okta, Entra ID) with SAML/OIDC/SCIM/MFA policy design.
• Experience with compliance automation platforms such as Vanta, Drata, or Secureframe.

Responsibilities

• Own key areas of security administration and structured risk management.
• Contribute to incident response documentation and remediation tracking.
• Maintain evidence automation in Vanta for audit readiness.
• Review integration requests for security and compliance impact before approval.
• Operate and maintain a structured risk management program and report status.

Skills

Risk management

GRC

Security operations

Documentation

Python scripting

Bash scripting

SSO policy design

Education

Bachelor's degree in Cybersecurity

Tools

Vanta

Drata

Secureframe

Cloudflare WAF

Cloudflare Log Explorer

OAuth flows

webhooks

API tokens

GCP

Google Workspace

Okta

Entra ID

Job description

PATRIOTCLAIMS LLC is seeking a Cybersecurity Risk & Compliance Analyst to strengthen operational security in a HIPAA‑regulated SaaS environment. This remote role reports to the CISO and supports risk governance, incident work, and audit readiness across the organization.

You will own security administration, run risk management, and contribute to vendor risk activities, including evidence automation in Vanta, while blending IAM, vulnerability monitoring, and cross‑functional assessments of