Sr. IT Security Compliance

Curant Health Georgia LLC; Smyrna (GA); Presencial; USD 90.000 - 125.000; Jornada completa

Descripción de la vacante

Curant Health Georgia LLC is seeking an IT Security Compliance Analyst to join our team in Smyrna, GA. You will support regulatory compliance programs, including HITRUST, SOC, HIPAA, and URAC, and collaborate across IT and business functions to strengthen security controls.

The ideal candidate has 3–5 years in IT security/compliance, strong governance risk management knowledge, and experience with audits, vulnerability management, and security monitoring tools such as Microsoft Defender and

Formación

• Bachelor’s degree in IT, cybersecurity, or related field; experience may be considered.
• 3–5 years in IT security, compliance, governance, risk management, or related field.
• Strong knowledge of HITRUST, SOC, HIPAA, and URAC.
• Experience supporting audits, risk assessments, and remediation efforts.
• Familiarity with vulnerability management, penetration testing, and security monitoring tools such as Defender, Rapid7, or SIEM.

Responsabilidades

• Support and maintain compliance with HITRUST, SOC, HIPAA, and URAC.
• Coordinate internal and external security audits and assessments.
• Develop, review, and maintain information security policies and procedures.
• Conduct risk assessments and gap analyses to identify vulnerabilities and controls.
• Maintain risk registers, control inventories, and audit records.
• Coordinate vulnerability assessments and remediation activities with IT teams.
• Monitor security alerts and events using Microsoft Defender, Rapid7, and other platforms.
• Support incident response activities and remediation tracking.
• Collaborate with IT Operations, Engineering, and stakeholders to ensure controls operate effectively.
• Coordinate disaster recovery testing and backup validation.

Conocimientos

Analytical thinking

Communication skills

Attention to detail

Time management

Problem solving

Educación

Bachelor's degree in IT / Cybersecurity

Herramientas

Microsoft Defender

Rapid7

SIEM platforms

Microsoft 365

Azure Entra ID

Exchange Online

SharePoint

Endpoint management

Descripción del empleo

Georgia
200 Technology Ct SE
Suite B
Smyrna, GA 30082, USA

• On-site
• IT
• Full-Time
• Requisition #: SRITS001684

Description

At Curant Health, we are dedicated to improving patient outcomes through personalized care, innovative pharmacy solutions, and a commitment to excellence. Our team works collaboratively to make a meaningful difference in the lives of the patients we serve.

We are seeking a detail-oriented, proactive IT Security Compliance Analyst to join our team. This individual will play a key role in supporting our information security and compliance programs, ensuring alignment with regulatory requirements and industry standards, including HITRUST, SOC, HIPAA, and URAC.

The ideal candidate brings a strong understanding of IT security, governance, risk management, and regulatory compliance, along with the ability to collaborate across teams, support audits, and continuously improve security processes.

What You’ll Do

Support and maintain compliance with regulatory and industry frameworks, including HITRUST, SOC, HIPAA, and URAC.

Coordinate internal and external security audits and assessments, including evidence collection, documentation, and remediation tracking.

Develop, review, and maintain information security policies, procedures, standards, and compliance documentation.

Conduct risk assessments and gap analyses to identify vulnerabilities, evaluate security controls, and recommend improvements.

Maintain risk registers, control inventories, audit records, and other compliance-related documentation.

Coordinate vulnerability assessments, penetration testing, and remediation activities in collaboration with IT teams and external partners.

Monitor security alerts and events using tools such as Microsoft Defender, Rapid7, and other security platforms.

Support incident response activities, including documentation, escalation, investigation, and remediation tracking.

Collaborate with IT Operations, Engineering, and business stakeholders to ensure security controls are implemented and operating effectively.

Coordinate disaster recovery testing, backup validation, tabletop exercises, and other recurring compliance activities.

Complete customer and third‑party security questionnaires and support vendor security assessments.

Evaluate security and compliance requirements for new technologies, software, and systems.

Provide guidance and training to employees on information security policies, procedures, and best practices.

Partner with internal teams, auditors, and external stakeholders to maintain audit readiness and support continuous improvement initiatives.

What We’re Looking For

Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred; equivalent professional experience may be considered.

3–5 years of experience in IT security, compliance, governance, risk management, or a related field.

Strong knowledge of security and compliance frameworks, including HITRUST, SOC, HIPAA, and URAC.

Experience supporting security audits, risk assessments, compliance reviews, and remediation efforts.

Familiarity with vulnerability management, penetration testing, and security monitoring tools such as Microsoft Defender, Rapid7, or SIEM platforms.

Working knowledge of Microsoft 365, Azure/Entra ID, Exchange Online, SharePoint, and endpoint management technologies.

Understanding of identity and access management, endpoint security, network security, and cloud security principles.

Experience developing and maintaining security policies, procedures, technical documentation, and audit evidence.

Knowledge of disaster recovery, business continuity, and incident response processes.

Strong analytical and problem‑solving skills with the ability to identify risks and recommend practical solutions.

Excellent written and verbal communication skills, with the ability to collaborate with technical and non‑technical stakeholders.

Exceptional attention to detail, organizational skills, and the ability to manage multiple priorities.

A proactive, self‑motivated approach with a strong sense of accountability and commitment to continuous improvement.

Why Join Curant Health?

At Curant Health, you’ll have the opportunity to contribute to an organization focused on improving healthcare outcomes while helping protect the systems, information, and processes that support our patients and teams.

We value collaboration, innovation, accountability, and individuals who are passionate about making a difference. Join a team where your expertise and contributions help strengthen our organization and support our mission of delivering exceptional patient care.

Curant Health is an Equal Opportunity Employer committed to fostering an inclusive workplace. We consider qualified applicants without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other status protected by applicable law. Reasonable accommodations are available to qualified individuals with disabilities.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.