Senior Security & Compliance Analyst (GRC, HITRUST/SOC 2)

Jobgether; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote position in the United States

Limited travel

Opportunity to shape GRC program

Exposure to HITRUST and SOC 2

Cross-functional collaboration

Job summary

Jobgether is partnering to recruit a Senior Security Analyst, Compliance in the United States. The role strengthens the organization’s information security governance, risk, and compliance program, with emphasis on HITRUST and SOC 2 readiness within a healthcare context.

You’ll work with IT, Privacy, Compliance, and external auditors to mature control practices, risk registers, and remediation processes. The ideal candidate has 5+ years in information security, with 3+ years in security audit

Qualifications

• Bachelor’s degree in cybersecurity or related discipline with professional experience.
• 5+ years of information security experience.
• 3+ years of information security audit management experience.
• Healthcare security and HITRUST experience preferred.

Responsibilities

• Lead and mature the information security risk management program (risk identification, assessment, tracking, remediation, metrics).
• Develop and report security risk and compliance metrics for visibility into program performance.
• Advance security assessment and reporting, coordinating SOC 2, HITRUST, and client security requests.
• Lead HITRUST framework use to measure and maintain maturity of the security program.
• Manage risk register and remediation with stakeholders.
• Conduct information security and IT risk assessments and apply risk scoring against appetite.
• Respond to client security questionnaires and ad hoc assessments.
• Collaborate to develop and maintain security content aligned with frameworks.
• Support HITRUST and other regulatory/compliance requirements.
• Contribute to third-party risk management and external partner assessments.
• Build repeatable GRC processes to strengthen governance and efficiency.
• Work with auditors and stakeholders to collect evidence and report.

Skills

Security governance

Risk management

Compliance management

Audit leadership

Third-party risk

Regulatory knowledge

Frameworks (HIPAA, ISO 27001/27002, N❜

Education

Bachelor’s degree in cybersecurity

Professional information security experience

Tools

HITRUST

SOC 2

GRC tools (Archer)

Job description

Jobgether is partnering to recruit a Senior Security Analyst, Compliance in the United States. The role strengthens the organization’s information security governance, risk, and compliance program, with emphasis on HITRUST and SOC 2 readiness within a healthcare context.

You’ll work with IT, Privacy, Compliance, and external auditors to mature control practices, risk registers, and remediation processes. The ideal candidate has 5+ years in information security, with 3+ years in security audit