Sr. IT Security Compliance

At Curant Health, we are dedicated to improving patient outcomes through personalized care, innovative pharmacy solutions, and a commitment to excellence. Our team works collaboratively to make a meaningful difference in the lives of the patients we serve.

We are seeking a detail-oriented, proactive IT Security Compliance Analyst to join our team. This individual will play a key role in supporting our information security and compliance programs, ensuring alignment with regulatory requirements and industry standards, including HITRUST, SOC, HIPAA, and URAC.

The ideal candidate brings a strong understanding of IT security, governance, risk management, and regulatory compliance, along with the ability to collaborate across teams, support audits, and continuously improve security processes.

• →

  Support and maintain compliance with regulatory and industry frameworks, including HITRUST, SOC, HIPAA, and URAC.

• →

  Coordinate internal and external security audits and assessments, including evidence collection, documentation, and remediation tracking.

• →

  Develop, review, and maintain information security policies, procedures, standards, and compliance documentation.

• →

  Conduct risk assessments and gap analyses to identify vulnerabilities, evaluate security controls, and recommend improvements.

• →

  Maintain risk registers, control inventories, audit records, and other compliance-related documentation.

• →

  Coordinate vulnerability assessments, penetration testing, and remediation activities in collaboration with IT teams and external partners.

• →

  Monitor security alerts and events using tools such as Microsoft Defender, Rapid7, and other security platforms.

• →

  Support incident response activities, including documentation, escalation, investigation, and remediation tracking.

• →

  Collaborate with IT Operations, Engineering, and business stakeholders to ensure security controls are implemented and operating effectively.

• →

  Coordinate disaster recovery testing, backup validation, tabletop exercises, and other recurring compliance activities.

• →

  Complete customer and third-party security questionnaires and support vendor security assessments.

• →

  Evaluate security and compliance requirements for new technologies, software, and systems.

• →

  Provide guidance and training to employees on information security policies, procedures, and best practices.

• →

  Partner with internal teams, auditors, and external stakeholders to maintain audit readiness and support continuous improvement initiatives.

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred; equivalent professional experience may be considered.

• 3–5 years of experience in IT security, compliance, governance, risk management, or a related field.

• Strong knowledge of security and compliance frameworks, including HITRUST, SOC, HIPAA, and URAC.

• Experience supporting security audits, risk assessments, compliance reviews, and remediation efforts.

• Familiarity with vulnerability management, penetration testing, and security monitoring tools such as Microsoft Defender, Rapid7, or SIEM platforms.

• Working knowledge of Microsoft 365, Azure/Entra ID, Exchange Online, SharePoint, and endpoint management technologies.

• Understanding of identity and access management, endpoint security, network security, and cloud security principles.

• Experience developing and maintaining security policies, procedures, technical documentation, and audit evidence.

• Knowledge of disaster recovery, business continuity, and incident response processes.

• Strong analytical and problem-solving skills with the ability to identify risks and recommend practical solutions.

• Excellent written and verbal communication skills, with the ability to collaborate with technical and non-technical stakeholders.

• Exceptional attention to detail, organizational skills, and the ability to manage multiple priorities.

• A proactive, self-motivated approach with a strong sense of accountability and commitment to continuous improvement.

Curant Health is an Equal Opportunity Employer committed to fostering an inclusive workplace. We consider qualified applicants without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other status protected by applicable law. Reasonable accommodations are available to qualified individuals with disabilities.