Sr. IT Security Compliance

Curant Health•Smyrna, GA

22h

About The Position

Curant Health is seeking a detail-oriented, proactive IT Security Compliance Analyst to support its information security and compliance programs. The role helps ensure alignment with regulatory requirements and industry standards, including HITRUST, SOC, HIPAA, and URAC. The successful candidate will collaborate across teams, support audits, and continuously improve security processes.

Requirements

3–5 years of experience in IT security, compliance, governance, risk management, or a related field.
Strong knowledge of security and compliance frameworks, including HITRUST, SOC, HIPAA, and URAC.
Experience supporting security audits, risk assessments, compliance reviews, and remediation efforts.
Familiarity with vulnerability management, penetration testing, and security monitoring tools such as Microsoft Defender, Rapid7, or SIEM platforms.
Working knowledge of Microsoft 365, Azure/Entra ID, Exchange Online, SharePoint, and endpoint management technologies.
Understanding of identity and access management, endpoint security, network security, and cloud security principles.
Experience developing and maintaining security policies, procedures, technical documentation, and audit evidence.
Knowledge of disaster recovery, business continuity, and incident response processes.
Strong analytical and problem-solving skills, with the ability to identify risks and recommend practical solutions.
Excellent written and verbal communication skills and the ability to collaborate with technical and non-technical stakeholders.
Exceptional attention to detail, organizational skills, and the ability to manage multiple priorities.
A proactive, self-motivated approach with a strong sense of accountability and commitment to continuous improvement.

Nice To Haves

Bachelor's degree in Information Technology, Cybersecurity, or a related field; equivalent professional experience may be considered.

Responsibilities

Support and maintain compliance with regulatory and industry frameworks, including HITRUST, SOC, HIPAA, and URAC.
Coordinate internal and external security audits and assessments, including evidence collection, documentation, and remediation tracking.
Develop, review, and maintain information security policies, procedures, standards, and compliance documentation.
Conduct risk assessments and gap analyses to identify vulnerabilities, evaluate security controls, and recommend improvements.
Maintain risk registers, control inventories, audit records, and other compliance-related documentation.
Coordinate vulnerability assessments, penetration testing, and remediation activities with IT teams and external partners.
Monitor security alerts and events using Microsoft Defender, Rapid7, and other security platforms.
Support incident response activities, including documentation, escalation, investigation, and remediation tracking.
Collaborate with IT Operations, Engineering, and business stakeholders to ensure security controls are implemented and operating effectively.
Coordinate disaster recovery testing, backup validation, tabletop exercises, and other recurring compliance activities.
Complete customer and third-party security questionnaires and support vendor security assessments.
Evaluate security and compliance requirements for new technologies, software, and systems.
Provide employees with guidance and training on information security policies, procedures, and best practices.
Partner with internal teams, auditors, and external stakeholders to maintain audit readiness and support continuous improvement initiatives.