Security Analyst (GRC)

Machinify; United States; Remote; USD 70,000 - 95,000; Full time

Benefits offered by this job

Work from anywhere in the US

Top Medical/Dental/Vision

FSA/HSA

401(k) with company match

Health and wellness benefits

Flexible and trusting environment

Job summary

Machinify is a leading healthcare intelligence company focused on secure, compliant data handling across the U.S. In this entry-level role, you’ll support security assurance operations, audits, and program administration while growing in a fast-paced environment.

Ideal candidates bring attention to detail, strong communication, and organizational skills. Background in cybersecurity helps, but experience in operations, finance, or accounting is also valued.

Qualifications

• Bachelor’s degree in Information Security, Business, Operations, Finance, Accounting, or related field, or equivalent work experience.
• Strong attention to detail and follow-through — you catch things others miss and see tasks through to completion.
• Excellent written and verbal communication skills, including comfort communicating with external clients.
• Ability to manage multiple concurrent requests and prioritize effectively in a fast-paced environment.
• Strong problem-solving orientation; you approach unfamiliar situations with curiosity and good judgment.
• Proficiency with productivity and work-tracking tools (ticketing systems, spreadsheets, document management).

Responsibilities

• Own the intake process for security assurance requests: review incoming tickets, triage and prioritize work, assign tasks to the appropriate team members, and track requests to resolution
• Resolve routine and straightforward security inquiries and questionnaire items independently
• Communicate clearly with internal stakeholders and customers throughout the assurance process, setting expectations and providing status updates
• Respond to customer security questionnaires and audit requests with accuracy and timeliness, escalating complex items as appropriate
• Maintain the security documentation repository and ensure materials are current and accessible
• Support customer-facing security calls and presentations alongside senior team members
• Assist with HITRUST r2 and SOC 2 audit preparation and evidence collection
• Help coordinate audit activities across internal teams, tracking open items and deadlines
• Support access review processes and other recurring compliance activities
• Assist with security policy and procedure maintenance
• Track and report on security metrics and assurance request status
• Assist with security awareness efforts and documentation as needed
• Participate in security incident response when needed

Skills

Detail oriented

Communication skills

Multitasking

Problem solving

Productivity tools

Education

Bachelor's degree or equivalent

Job description

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 85 health plans, including many of the top 20, and representing more than 270 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We’re constantly reimagining what’s possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

About the Opportunity

At Machinify, we’re building a robust security program to protect our clients’ sensitive healthcare data and maintain the highest standards of information security. As part of the Security team, you will play a central role in managing our security assurance operations — helping ensure that customer requests, audit activities, and compliance processes run smoothly and efficiently.

This is an entry-level role suited for someone detail-oriented, hardworking, and intellectually curious. A background in cybersecurity is helpful but not required. We’ll consider candidates with experience in business operations, finance, accounting, or related fields who demonstrate strong organizational instincts and a commitment to doing things right.

What You’ll Do

Security Assurance Operations (60% of role)

• Own the intake process for security assurance requests: review incoming tickets, triage and prioritize work, assign tasks to the appropriate team members, and track requests to resolution
• Resolve routine and straightforward security inquiries and questionnaire items independently
• Communicate clearly with internal stakeholders and customers throughout the assurance process, setting expectations and providing status updates
• Respond to customer security questionnaires and audit requests with accuracy and timeliness, escalating complex items as appropriate
• Maintain the security documentation repository and ensure materials are current and accessible
• Support customer-facing security calls and presentations alongside senior team members

Audit and Compliance Support (25% of role)

• Assist with HITRUST r2 and SOC 2 audit preparation and evidence collection
• Help coordinate audit activities across internal teams, tracking open items and deadlines
• Support access review processes and other recurring compliance activities
• Assist with security policy and procedure maintenance

General Security Program Support (15% of role)

• Track and report on security metrics and assurance request status
• Assist with security awareness efforts and documentation as needed
• Participate in security incident response when needed

What You Bring

Essential Qualifications

• Bachelor’s degree in Information Security, Business, Operations, Finance, Accounting, or a related field, or equivalent work experience
• Strong attention to detail and follow-through — you catch things others miss and see tasks through to completion
• Excellent written and verbal communication skills, including comfort communicating with external clients
• Ability to manage multiple concurrent requests and prioritize effectively in a fast-paced environment
• Strong problem-solving orientation; you approach unfamiliar situations with curiosity and good judgment
• Proficiency with productivity and work-tracking tools (ticketing systems, spreadsheets, document management)

Preferred Qualifications

• 1–2 years of experience in operations, compliance, audit support, finance, or a related field
• Exposure to information security concepts, frameworks (NIST, HITRUST, SOC 2), or HIPAA compliance
• Experience in healthcare, healthcare technology, or working with regulated data environments
• Familiarity with GRC or security assurance workflows

What We Offer

• Work from anywhere in the US! Machinify is digital-first.
• Top Medical/Dental/Vision offerings
• FSA/HSA
• Competitive salary, 401(k) with company match
• Additional health and wellness benefits and perks
• Flexible and trusting environment where you’ll feel empowered to do your best work

The salary for this position is based on an array of factors unique to each candidate: Such as years and depth of experience, set skills, certifications, etc. We are hiring for different levels, and our Recruiting team will let you know if you qualify for a different role/range.

Pay range: $70,000-$95,000

Equal Employment Opportunity at Machinify

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. Machinify is an employment at will employer. We participate in E-Verify as required by applicable law. In accordance with applicable state laws, we do not inquire about salary history during the recruitment process. If you require a reasonable accommodation to complete any part of the application or recruitment process, please let our recruiters know. See our Candidate Privacy Notice at: https://www.machinify.com/candidate-privacy-notice/

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Machinify’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.