[Remote] ITSC Security Analyst
Note: The job is a remote job and is open to candidates in USA. Judi Health is an enterprise health technology company that provides comprehensive solutions for employers and health plans. The IT Security & Compliance Analyst will work collaboratively within the IT department to identify and manage security risks, implement and monitor security compliance, and respond effectively to audits.
Responsibilities
• Collaborate with the engineering departments to implement security controls from approved security frameworks and drive best IT practices
• Interface with internal partner teams to help drive best practices and compliance
• Evaluate and perform Risk Assessments of new software solutions with internal partners
• Drive deployment of new systems/solutions as needed
• Write procedure documentation for end users as needed to facilitate process improvement
• Help develop IT security training content and drive completion of required security training in collaboration with Human Resources
• Respond to complex security questionnaires, RFP/RFI requests, and client audits
• Facilitate end-to-end evidence gathering for external audits, ensuring all technical and administrative artifacts align strictly with security control requirements and regulatory frameworks
• Evaluate, identify, and remediate the risks associated with current vendors, new vendor acquisitions, and consumer data exchanges
• Perform risk oversight tasks of vendor security compliance
• Help run Internal, external and vendor related audits
• Conduct security analysis of deployed software
• Monitor for risks to the enterprise and to implemented controls
• Identify, maintain, and publish the requirements for the IT department to achieve compliance and privacy standards in SOC 2, HITRUST, FedRAMP, and other frameworks
• Work with the internal team in communicating related security notifications and IT controls within the organization while collaborating with teams and vendors on changes, remediations, and updates
• Experience with incident management Drive use cases to enable threat detection and hunting based on threat intelligence frameworks
• Experience with Agile and/or Kanban with emphasis on Scrum to drive continuous process improvement
• Perform Access Reviews
Skills
• Experience related to duties and responsibilities
• Experience working in Governance, Risk, and Compliance
• A customer-oriented approach to problem resolution
• Experience with IT control auditing and compliance
• Working knowledge of Software Development Lifecycle concepts and processes
• Working knowledge of cloud providers with respect to IT Security & Compliance controls and practices
• General knowledge of frameworks and controls: NIST 800-53, FedRAMP, HITRUST, SOC 2, PCI, ISO 27001
• General knowledge of HIPAA and the requirements to protect PHI
• Ability to communicate concepts in a concise form to management and cross-functional teams. departments or teams verbally, in writing, and through pictures or diagrams when appropriate
• Excellent written, oral, instructional, presentation, and interpersonal skills focused on motivation and positive attitude
• Highly self-motivated with the ability to prioritize tasks and work independently
• Ability to work quickly and efficiently
• Desire to work at a rapidly growing organization in healthcare
• Experience working with remote users in a distributed environment
• Experience with Office 365 suite, Atlassian suite, Vanta (or other GRC tools)
• Experience with any major cloud platform (AWS, Google, Azure) is preferred
• CCSK
• CCAK
• CISA
• AWS Cloud Practitioner
• SANS certificates
Company Overview
• Capital Rx is now Judi Health! Navigate to our new page here: https://www.linkedin.com/company/judi-health It was founded in 2017, and is headquartered in New York, NY, US, with a workforce of 501-1000 employees. Its website is https://www.judi.health/about/careers.
Company H1B Sponsorship
• Capital Rx has a track record of offering H1B sponsorships, with 3 in 2025, 2 in 2024, 1 in 2023, 1 in 2022, 5 in 2021. Please note that this does not guarantee sponsorship for this specific role.
Apply tot his job
Apply To this Job
Responsibilities
• Collaborate with the engineering departments to implement security controls from approved security frameworks and drive best IT practices
• Interface with internal partner teams to help drive best practices and compliance
• Evaluate and perform Risk Assessments of new software solutions with internal partners
• Drive deployment of new systems/solutions as needed
• Write procedure documentation for end users as needed to facilitate process improvement
• Help develop IT security training content and drive completion of required security training in collaboration with Human Resources
• Respond to complex security questionnaires, RFP/RFI requests, and client audits
• Facilitate end-to-end evidence gathering for external audits, ensuring all technical and administrative artifacts align strictly with security control requirements and regulatory frameworks
• Evaluate, identify, and remediate the risks associated with current vendors, new vendor acquisitions, and consumer data exchanges
• Perform risk oversight tasks of vendor security compliance
• Help run Internal, external and vendor related audits
• Conduct security analysis of deployed software
• Monitor for risks to the enterprise and to implemented controls
• Identify, maintain, and publish the requirements for the IT department to achieve compliance and privacy standards in SOC 2, HITRUST, FedRAMP, and other frameworks
• Work with the internal team in communicating related security notifications and IT controls within the organization while collaborating with teams and vendors on changes, remediations, and updates
• Experience with incident management Drive use cases to enable threat detection and hunting based on threat intelligence frameworks
• Experience with Agile and/or Kanban with emphasis on Scrum to drive continuous process improvement
• Perform Access Reviews
Skills
• Experience related to duties and responsibilities
• Experience working in Governance, Risk, and Compliance
• A customer-oriented approach to problem resolution
• Experience with IT control auditing and compliance
• Working knowledge of Software Development Lifecycle concepts and processes
• Working knowledge of cloud providers with respect to IT Security & Compliance controls and practices
• General knowledge of frameworks and controls: NIST 800-53, FedRAMP, HITRUST, SOC 2, PCI, ISO 27001
• General knowledge of HIPAA and the requirements to protect PHI
• Ability to communicate concepts in a concise form to management and cross-functional teams. departments or teams verbally, in writing, and through pictures or diagrams when appropriate
• Excellent written, oral, instructional, presentation, and interpersonal skills focused on motivation and positive attitude
• Highly self-motivated with the ability to prioritize tasks and work independently
• Ability to work quickly and efficiently
• Desire to work at a rapidly growing organization in healthcare
• Experience working with remote users in a distributed environment
• Experience with Office 365 suite, Atlassian suite, Vanta (or other GRC tools)
• Experience with any major cloud platform (AWS, Google, Azure) is preferred
• CCSK
• CCAK
• CISA
• AWS Cloud Practitioner
• SANS certificates
Company Overview
• Capital Rx is now Judi Health! Navigate to our new page here: https://www.linkedin.com/company/judi-health It was founded in 2017, and is headquartered in New York, NY, US, with a workforce of 501-1000 employees. Its website is https://www.judi.health/about/careers.
Company H1B Sponsorship
• Capital Rx has a track record of offering H1B sponsorships, with 3 in 2025, 2 in 2024, 1 in 2023, 1 in 2022, 5 in 2021. Please note that this does not guarantee sponsorship for this specific role.
Apply tot his job
Apply To this Job