Sr. IT Security Compliance

Curant Health•Smyrna, GA

About The Position

Curant Health is seeking a detail-oriented, proactive IT Security Compliance Analyst to support its information security and compliance programs. The role helps ensure alignment with regulatory requirements and industry standards, including HITRUST, SOC, HIPAA, and URAC. The ideal candidate understands IT security, governance, risk management, and regulatory compliance, and can collaborate across teams, support audits, and improve security processes. The position contributes to protecting the systems, information, and processes that support Curant Health’s patients and teams. It works with IT Operations, Engineering, business stakeholders, auditors, and external partners to maintain audit readiness and ensure security controls are implemented and operating effectively.

Requirements

3–5 years of experience in IT security, compliance, governance, risk management, or a related field.
Strong knowledge of security and compliance frameworks, including HITRUST, SOC, HIPAA, and URAC.
Experience supporting security audits, risk assessments, compliance reviews, and remediation efforts.
Familiarity with vulnerability management, penetration testing, and security monitoring tools such as Microsoft Defender, Rapid7, or SIEM platforms.
Working knowledge of Microsoft 365, Azure/Entra ID, Exchange Online, SharePoint, and endpoint management technologies.
Understanding of identity and access management, endpoint security, network security, and cloud security principles.
Experience developing and maintaining security policies, procedures, technical documentation, and audit evidence.
Knowledge of disaster recovery, business continuity, and incident response processes.
Strong analytical and problem-solving skills, including the ability to identify risks and recommend practical solutions.
Excellent written and verbal communication skills and ability to collaborate with technical and non-technical stakeholders.
Exceptional attention to detail and organizational skills, with the ability to manage multiple priorities.
A proactive, self-motivated approach with a strong sense of accountability and commitment to continuous improvement.

Nice To Haves

Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred; equivalent professional experience may be considered.

Responsibilities

Support and maintain compliance with HITRUST, SOC, HIPAA, URAC, and other applicable regulatory and industry frameworks.
Coordinate internal and external security audits and assessments, including evidence collection, documentation, and remediation tracking.
Develop, review, and maintain information security policies, procedures, standards, and compliance documentation.
Conduct risk assessments and gap analyses to identify vulnerabilities, evaluate security controls, and recommend improvements.
Maintain risk registers, control inventories, audit records, and other compliance-related documentation.
Coordinate vulnerability assessments, penetration testing, and remediation activities with IT teams and external partners.
Monitor security alerts and events using Microsoft Defender, Rapid7, and other security platforms.
Support incident response activities, including documentation, escalation, investigation, and remediation tracking.
Collaborate with IT Operations, Engineering, and business stakeholders to ensure security controls are implemented and operating effectively.
Coordinate disaster recovery testing, backup validation, tabletop exercises, and other recurring compliance activities.
Complete customer and third-party security questionnaires and support vendor security assessments.
Evaluate security and compliance requirements for new technologies, software, and systems.
Provide employees with guidance and training on information security policies, procedures, and best practices.
Partner with internal teams, auditors, and external stakeholders to maintain audit readiness and support continuous improvement initiatives.