Third-Party Risk Analyst — Healthcare & HIPAA Focus

Fortified Health Security; Exton (PA); On-site; USD 65,000 - 70,000; Full time

Job summary

Fortified Health Security in Exton, PA is seeking a Third Party Risk Analyst to ensure timely processing and delivery of TPRM assessments and reports for clients in the healthcare sector.

You will apply information security frameworks such as HIPAA, NIST CSF 2.0, and HITRUST to identify risks in third-party relationships, develop actionable remediation plans, and communicate findings to clients and stakeholders.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• 1+ years’ experience in IT support or help desk in an enterprise environment.
• Experience with HITRUST CSF, NIST CSF 2.0, ISO 27001, and SOC 2 Type 2.
• HIPAA Security Rule in day-to-day responsibilities preferred.
• Healthcare information security industry experience highly preferred.

Responsibilities

• Ensure timely delivery of TPRM vendor assessment reports and other deliverables.
• Create reports reflecting assessment findings and recommendations for technical and executive audiences.
• Communicate with clients and third parties regarding TPRM service support and delivery.
• Directly manage and oversee the delivery of TPRM services for assigned clients.
• Maintain knowledge of healthcare information security and privacy laws and industry frameworks (HIPAA, HITECH, NIST CSF 2.0).
• Maintain knowledge of TPRM best practices.
• Contribute to maintenance of client-specific and internally managed TPRM policies and SOPs.

Skills

Analytical mindset

Detail oriented

Communication skills

Priority management

Team collaboration

Education

Bachelor's degree or equivalent

Job description

Fortified Health Security in Exton, PA is seeking a Third Party Risk Analyst to ensure timely processing and delivery of TPRM assessments and reports for clients in the healthcare sector.

You will apply information security frameworks such as HIPAA, NIST CSF 2.0, and HITRUST to identify risks in third-party relationships, develop actionable remediation plans, and communicate findings to clients and stakeholders.