Remote Security Analyst — HIPAA & Compliance

Pixel Health co; United States; À distance; USD 95 000 - 116 000; Plein temps

Avantages offerts par ce poste

Competitive Salary

Flexible Hours

PTO

Paid Health, Dental and Vision

Matching 401k Plan

Great team environment

Résumé du poste

Pixel Health co is seeking a Security Analyst to monitor security events, support identity governance, and assist with compliance documentation. The role serves as the first point of contact for routine security matters and requires the ability to respond to incidents under established procedures.

This remote, after-hours role emphasizes policy development, runbooks, audits, and client-facing summaries, with HIPAA, NIST CSF, CIS Controls, and PCI DSS guidance guiding daily work.

Qualifications

• 3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
• Experience investigating security events across endpoint, email, or identity sources.
• Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
• Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
• Demonstrated ability to write clear policies, procedures, and technical documentation.
• Strong written and verbal communication, including client-facing summaries.
• Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.

Responsabilités

• Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
• Contain and remediate security events using approved procedures, and upscale incidents that exceed defined thresholds.
• Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
• Respond to reported phishing and suspicious activity.
• Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
• Document incidents and prepare summaries for management review.
• Conduct periodic access reviews and report exceptions.
• Review privileged access, application control, and credential management requests against established policy, and elevate exceptions.
• Draft and revise policies, procedures, and supporting standards for management review and approval.
• Maintain the policy and procedure library, including versioning and the annual review cycle.
• Prepare client-ready documentation and supporting materials for management to present.
• Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations.
• Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
• Administer the security awareness program, including assignment, completion tracking, and follow-up.
• Join client discussions in a supporting role as directed by management.
• Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
• Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
• Identify recurring issues and recommend process improvements.

Connaissances

Security operations

Identity & access mgmt

Policy drafting

Technical writing

Client communication

Description du poste

Pixel Health co is seeking a Security Analyst to monitor security events, support identity governance, and assist with compliance documentation. The role serves as the first point of contact for routine security matters and requires the ability to respond to incidents under established procedures.

This remote, after-hours role emphasizes policy development, runbooks, audits, and client-facing summaries, with HIPAA, NIST CSF, CIS Controls, and PCI DSS guidance guiding daily work.