IT Security and Compliance Analyst - Medical/Healthcare

$90,000 - $105,000/Yr

Vivo Infusion - Lakewood, CO

Full-time - Mid Level

Remote - Lakewood, CO

About the position

As an IT Security and Compliance Analyst at Vivo Infusion, you will play a crucial role in ensuring the organization meets essential IT regulatory and security requirements. This position requires a detail-oriented professional with strong communication skills and a passion for IT security compliance. You will work closely with the Security Officer and various stakeholders to uphold compliance with regulations such as HIPAA and PCI DSS, while also managing IT compliance policies for new acquisitions and conducting risk assessments.

Responsibilities

• Manage, assess, and implement IT compliance policies for new acquisitions.
• Review and analyze acquired software for security and administrative access.
• Monitor PCI compliance and yearly SAQ AOCs for Vivo and acquired companies until migrated to Vivo standard.
• Examine quarterly vulnerability scan reports, ensuring timely mitigation of risks.
• Engage in internal and external risk assessments, developing strategies to address any compliance gaps identified.
• Maintain and update IT policies and procedures as necessary.
• Conduct ongoing risk analysis documentation and perform regular audits to ensure adherence to regulations.
• Prepare compliance reports for submission to the Security Officer.
• Investigate security incidents promptly and efficiently.
• Conduct physical access audits to ensure security protocols are upheld.
• Stay informed about relevant regulations and compliance standards in the technology industry.
• Perform security reviews of potential vendors.

Requirements

• High school diploma or equivalent, required.
• Associate's degree in Computer Science or related field, preferred.
• Minimum 6 years of experience in an IT environment, required.
• Minimum of 2 years IT experience within the medical industry, required.
• 2+ years in IT security and compliance role, required.
• CGRC certification, preferred.
• Deep understanding of the HIPAA Security Rule.
• Working knowledge with risk assessment tools (e.g., OCR SRA Tool).
• Understanding of NIST and HITRUST.
• Knowledge of PCI DSS.
• Outstanding communication and interpersonal skills.

Nice-to-haves

• Experience with risk assessment tools.
• CGRC certification.

Benefits

• 401(k) matching
• Dental insurance
• Disability insurance
• Employee assistance program
• Health insurance
• Health savings account
• Opportunities for advancement
• PTO: Accrual 4+ weeks/YR
• Wellness Reimbursement Program
• Employee Referral Bonus
• Tuition Assistance Program
• Short & long-term disability