Information Security Analyst

VAXCARE LLC•Orlando, FL

10d•Onsite

About The Position

The Information Security Analyst will support VaxCare’s security and compliance program with a primary focus on administrative safeguards, policy and procedure management, and third‑party assurance activities. This role partners closely with the Director of Information Security and Compliance to ensure VaxCare’s information security program remains aligned with the HITRUST CSF, regulatory expectations, and contractual obligations with vendors and partners. This position is well suited for someone who is detail‑oriented, comfortable with documentation and cross‑functional coordination, and experienced in translating security frameworks into clear, actionable policies and processes.

Requirements

Bachelor's or Graduate degree in Cybersecurity, Information Systems, or a related field
0-2 years of relevant experience in cybersecurity, audit, risk, or compliance
Solid understanding of fundamental security and IT concepts
Familiarity with major security and privacy frameworks (knowledge of NIST 800-53, NIST 800-171, CSF, CMMC, DFARS, IS027001, PCI, HIPAA and other regulations preferred)
Technical aptitude and a passion for cybersecurity
Dependability – Must be able to meet deadlines, work independently, maintain focus, & punctual
Interpersonal Skills – Builds strong relationships & contributes to a positive work environment.
Computer Skills – Skilled with computers, learns new tools quickly.
Ethics – Honest, accountable, maintains confidentiality.
Must be able to perform job duties independently with minimal supervision.
Must have private, distraction -free workspace suitable for confidential and focused work.
Must have reliable high-speed internet to support video conferencing and regular computer use.
Must be comfortable being on camera for Microsoft Teams meetings/video conference calls.
Must be willing & able to travel on-site in Orlando, Florida at least 2x per year.
Team members must be able to remain in a stationary position for extended periods, as much of the work involves sitting at a computer or workstation.
Significant use of the hands, wrists, and fingers is required for tasks like typing, using a computer mouse, and handling paperwork.
This job requires the ability to view a computer screen and read documents for extended periods.
Team members must be able to clearly express and exchange ideas in English to effectively communicate with customers and co-workers.
Ability to occasionally lift or move up to 10-20 pounds to handle supplies or equipment.

Nice To Haves

knowledge of NIST 800-53, NIST 800-171, CSF, CMMC, DFARS, IS027001, PCI, HIPAA and other regulations preferred

Responsibilities

Draft, review, and maintain information security policies, standards, and procedures in alignment with updates to the HITRUST CSF and other applicable frameworks
Track HITRUST framework changes and support policy updates to ensure ongoing alignment and audit readiness
Coordinate the third-party assurance program, including: Managing outbound security questionnaires and evidence requests sent to vendors, Reviewing and filling out inbound security questionnaires and assurance documentation received from partners and customers
Support internal and external audits by organizing documentation, maintaining evidence repositories, and responding to auditor requests
Collaborate with legal, privacy, IT, and business stakeholders to ensure security documentation accurately reflects operational practices
Assist with risk assessments, exception tracking, and remediation documentation related to administrative safeguards
Build and maintain reports and artifacts that demonstrate VaxCare’s security governance and compliance posture
Further the mission of the Information Security Management Program (ISMP) and help build a culture of security awareness across the organization (e.g., manage security e-learning and write/publish internal information security newsletters)