Senior Security Analyst

Key Responsibilities

• Assess HIPAA security controls and identify gaps.
• Perform security risk assessments for systems handling PHI.
• Prepare audit documentation, evidence, and risk reports.
• Review security controls across Microsoft 365, AWS, and Salesforce.
• Support remediation of security findings and compliance gaps.
• Map security controls to HIPAA and NIST frameworks.

Required Skills

• Hands-on experience with HIPAA Security Rule and PHI protection.
• Microsoft 365 security, Entra ID, Conditional Access, Purview, and DLP.
• AWS security, IAM, encryption, and logging.
• Security risk assessments, audit readiness, and GRC tools.
• Knowledge of NIST 800-53, ISO 27001, or HITRUST.

Healthcare, pharmaceutical, or patient-support program experience is a plus.