Remote Information Security Associate — Risk & Compliance

athenahealth; United States; Remote; USD 70,000 - 120,000; Full time

Job summary

athenahealth is seeking an Information Security Associate to support cybersecurity, IT risk management, and security audits. The role collaborates across information security, systems administration, and project coordination to identify risks and improve security practices.

This is a remote position with team members distributed globally, reporting to the Director of Information Security. The role emphasizes vendor onboarding, compliance reviews, and supporting security operations, with

Qualifications

• Bachelor's degree in CS or a related field or IT Audit experience.
• 2+ years of experience managing technical projects.
• 2+ years of experience managing external vendors from a compliance (InfoSec) perspective.
• Strong written and verbal communication skills.
• Experience with Agile and Scrum project management concepts.
• Certifications such as CISSP, CISA, Agile/Scrum are a plus.

Responsibilities

• Ensure vendor compliance with Information Security requirements and report findings to leadership.
• Understand and apply technical concepts to vendor onboarding and compliance.
• Follow change control processes to implement security software updates.
• Create Information Security project plans with deliverables, timelines, and budgets.
• Communicate and track exceptions to policies and manage related risk.
• Review internal and vendor practices to stay compliant with regulatory requirements.

Skills

Vendor management

Project management

Agile/Scrum

Communication skills

Risk management

Education

Bachelor's degree in CS or IT audit

Job description

athenahealth is seeking an Information Security Associate to support cybersecurity, IT risk management, and security audits. The role collaborates across information security, systems administration, and project coordination to identify risks and improve security practices.

This is a remote position with team members distributed globally, reporting to the Director of Information Security. The role emphasizes vendor onboarding, compliance reviews, and supporting security operations, with