Cybersecurity Analyst (Remote)

OSIS•Remote_Arizona, MA

22h•$75,000 - $115,000•Remote

About The Position

We are seeking an experienced Cybersecurity Analyst to help protect our organization and the healthcare organizations we support from evolving security risks. In this fully remote position, you will help plan, implement, monitor, and enhance security controls designed to safeguard computer systems, networks, and sensitive information. This role combines hands-on cybersecurity work with security risk management and healthcare compliance. You will conduct risk assessments, identify and address vulnerabilities, support security audits, implement security controls, and provide guidance and technical assistance to participating health centers (PHCs). You will also help ensure security practices align with applicable industry standards and federal healthcare regulations. Join us and use your cybersecurity expertise to help strengthen information security and risk management across organizations serving community healthcare.

Requirements

Bachelor's degree in Computer Science, Programming, or a related field required.
At least three years of computer systems experience, preferably with a specialization in information security.
Strong technical knowledge with the ability to evaluate security threats, vulnerabilities, and controls.
Excellent problem-solving, communication, customer service, and collaboration skills.
Ability to work effectively in a remote environment while managing multiple priorities.

Nice To Haves

An MBA in Information Systems is preferred.
Relevant cybersecurity, compliance, or risk-management certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, or CRISC are preferred.
Experience implementing technical security controls within a healthcare environment.
Experience developing and implementing Security Risk Management programs.
Experience translating cybersecurity regulations and frameworks into practical risk-assessment processes and tools.
Experience developing and evaluating technical and process-based security controls.
Experience managing security risk assessments and investigations.
Experience working with frameworks, regulations, and certifications such as HIPAA, HITECH, PCI, SOX, SOC 1 & 2, ISO, and Meaningful Use/Promoting Interoperability.
Experience working directly within the healthcare industry.

Responsibilities

Perform security risk assessments, audits, and testing to identify vulnerabilities and areas of concern.
Develop and implement safeguards to protect sensitive and confidential information from unauthorized access, modification, disclosure, or destruction.
Monitor security threats and vulnerabilities and coordinate necessary application and system updates.
Implement and support security tools and controls, including data encryption, application patching, and device management.
Research and deploy CIS security benchmarks.
Review security incidents and procedural violations and provide education to help prevent recurrence.
Monitor and restrict access to sensitive and high-security information.
Partner with users and stakeholders to evaluate workflows, identify security risks, and recommend improvements.
Promote cybersecurity awareness and provide security-related training.
Serve as a Security Risk Assessment resource for PHCs, providing training and technical assistance.
Assist PHCs with mitigation plans for areas of concern identified through security risk assessments.
Participate in state, local, and national collaborations supporting community health centers (CHCs), including peer collaboration groups.