Senior IT Security & Risk Analyst - HIPAA & PCI Compliance

Institute on Aging; San Francisco (CA); On-site; USD 130,000 - 134,000; Full time

Job summary

Institute on Aging (IOA) is seeking a senior IT security professional to assess and mitigate risk across our networks, systems and applications in a healthcare setting. You will lead IT security projects, guide policy improvements, and partner with audit teams to ensure HIPAA, HITRUST and PCI compliance.

The role requires 4+ years of security experience, strong risk and governance capabilities, and hands-on work managing security controls in a complex environment.

Qualifications

• Associates degree or higher in Information Systems, CS, Information Security, or related discipline.
• 4+ years of IT security or information security experience.
• 2+ years of IT compliance assessments (HIPAA, HITRUST, PCI, etc.).
• 2+ years of experience administering IT security controls.
• Demonstrated knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.

Responsibilities

• Assess information risk and remediate vulnerabilities in IOA's networks, systems, and applications.
• Perform vulnerability assessments utilizing IT security tools and methodologies.
• Assess IT security/risk posture within the network, systems, and software applications; vendor management.
• Identify opportunities to reduce risk and document remediation options.
• Facilitate and monitor risk remediation tasks and changes related to risk mitigation.
• Report findings and provide recommendations for corrective action.
• Provide oversight of IT and vendors regarding security maintenance of systems and applications.
• Support IT audits, risk assessments, and regulatory compliance matters.
• Perform IT security and risk assessments across data systems, networks, and web applications.
• Lead IT security projects and develop security solutions/processes.

Skills

Interpersonal communication

MS Office proficiency

Windows administration

Education

Associates degree or higher in Information Systems, Computer Science, Information Security, or related discipline

Tools

IPS/IDS

SIEM

Windows Server

Windows Desktop

Job description

Institute on Aging (IOA) is seeking a senior IT security professional to assess and mitigate risk across our networks, systems and applications in a healthcare setting. You will lead IT security projects, guide policy improvements, and partner with audit teams to ensure HIPAA, HITRUST and PCI compliance.

The role requires 4+ years of security experience, strong risk and governance capabilities, and hands-on work managing security controls in a complex environment.