Remote Senior Information Security Analyst - Impact

CareMetx, LLC; United States; Remoto; USD 110.000 - 170.000; Tempo integral

Resumo da vaga

CareMetx, LLC is seeking a Senior Information Security Analyst to lead security operations and risk management across our GRC, vulnerability, and incident response programs. The role oversees compliance, testing, and audit support while coordinating with vendors and internal teams.

You will operate in a remote US-based environment, support SOC 2/PHI requirements, and participate in on-call rotations for after-hours escalations. A robust information security background is essential.

Qualificações

• 7+ years in information security, security operations, vulnerability management, GRC, or related role.
• MS or bachelor's degree in Computer Science/MIS or similar technical field preferred.
• Broad IT experience in infrastructure/operations or application development with impact awareness.
• Experience in security incident response including evidence collection and coordination.

Responsabilidades

• Compliance monitoring across SOC 2, HIPAA, and NIST CSF 2.0; create remediation tickets and track progress.
• Vulnerability management: triage findings, assign severity, define KPIs, and surface trends to leadership.
• Configuration assurance: verify CIS Benchmarks, identify gaps, and document exceptions.
• Incident response and security operations: serve as first-line responder, assist in investigations, and maintain IR plans.
• External penetration test coordination: coordinate annual tests and ensure remediation timelines.
• Third-party and vendor risk: answer technical questions and assess critical vendors for PHI handling.
• SOC 2 and customer audit support: collect evidence and assist system owners.
• Shadow IT and AI monitoring: monitor SaaS/AI usage and tune security alerts.

Conhecimentos

Security operations

GRC

Vulnerability management

Incident response

Cloud security

Formação

MS or Bachelor's degree in Computer Science/MIS

Ferramentas

GRC platform

Vulnerability scanners

Cloud security posture tools

Descrição da vaga

CareMetx, LLC is seeking a Senior Information Security Analyst to lead security operations and risk management across our GRC, vulnerability, and incident response programs. The role oversees compliance, testing, and audit support while coordinating with vendors and internal teams.

You will operate in a remote US-based environment, support SOC 2/PHI requirements, and participate in on-call rotations for after-hours escalations. A robust information security background is essential.