IT / Security Operations Analyst

Qualified Health

1d•$120,000 - $145,000•Hybrid

About The Position

At Qualified Health, we’re redefining what’s possible with Generative AI in healthcare. Our infrastructure provides the guardrails for safe AI governance, healthcare-specific agent creation, and real-time algorithm monitoring—working alongside leading health systems to drive real change. This is more than just a job. It’s an opportunity to build the future of AI in healthcare, solve complex challenges, and make a lasting impact on patient care. If you’re ambitious, innovative, and ready to move fast, we’d love to have you on board. Join us in shaping the future of healthcare. Job Summary: The IT / Security Operations Analyst owns the operational engine of security, compliance, and IT at Qualified Health. You're the person who keeps the day-to-day running: vendor intakes, IAM administration, device management, IT vendor coordination, compliance evidence collection, and the security questionnaires that our health system partners send us as part of their due diligence. This is a foundational role in a rapidly growing company. We handle protected health information for 15+ major health systems, and the security operational work is real, growing, and critically important. Today, some of it is being absorbed by our data integration team — people who should be deploying AI workflows, not resetting passwords and reviewing vendor SOC 2 reports. You'll take that operational burden off their plate and give it the dedicated attention it deserves. You'll work alongside the Director of Security & Compliance and a security engineer, forming a team that owns the company's entire security and IT operations posture.

Requirements

3-5 years in IT operations, security operations, or GRC roles
Experience with IAM platforms (Okta, Azure AD/Entra, or similar)
Familiarity with MDM solutions and endpoint management
Understanding of compliance frameworks (HITRUST, SOC 2, HIPAA)
Bachelor's degree in Information Technology, Cybersecurity, Computer Science or a related field
Organizational Mastery: You manage dozens of concurrent operational tasks — vendor reviews, access requests, device enrollments, questionnaire responses — without dropping any of them
Documentation Rigor: You keep processes documented, evidence organized, and compliance records audit-ready at all times
Responsiveness: When someone needs access provisioned, a vendor reviewed, or a security questionnaire completed, you handle it promptly and accurately
Process Improvement: You don't just run the operational playbook — you improve it. You look for ways to automate, streamline, and reduce manual effort
Discretion: You handle sensitive information (access credentials, security findings, vendor assessments) with the appropriate level of confidentiality and professionalism

Nice To Haves

Vendor management experience — assessing third-party security posture and managing remediation
Healthcare industry experience — understanding of HIPAA requirements and health system security expectations
Experience with compliance automation tools (Vanta, Drata, or similar)
Background managing outsourced IT support relationships
Experience at a fast-growing startup where operational processes were being built alongside daily execution

Responsibilities

Manage vendor security intakes and assessments — evaluating new vendors against our security requirements and maintaining the vendor inventory
Administer IAM (identity and access management) across company systems — user provisioning, access reviews, role management
Manage device enrollment, MDM policies, and endpoint compliance
Coordinate with our outsourced IT support vendor for employee onboarding/offboarding and support escalations
Support ongoing HITRUST compliance maintenance and evidence collection
Complete client security questionnaire responses — lifting this from the integration team
Maintain security documentation, policies, and procedures
Support security scan report preparation and remediation tracking