Senior Security Compliance Analyst

Job Summary

A company is looking for a Senior Security Compliance Analyst to support and enhance security and compliance programs within the healthcare industry.

Key Responsibilities

• Lead and support customer security audits, ensuring compliance with security frameworks
• Prepare and manage ISO 27001 audits, including evidence collection and auditor engagement
• Develop and maintain policies, procedures, and security documentation to meet regulatory obligations

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Risk Management, or related field (or equivalent experience)
• 8+ years of progressive experience in GRC, compliance, or security audit roles
• Experience in healthcare or regulated industries strongly preferred
• Certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, HITRUST CCSFP, CRISC are strongly preferred
• Strong understanding of NIST CSF, SOC 2, GDPR, and other security frameworks