Security Analyst (GRC)

Machinify

16h•$70,000 - $95,000•Remote

About The Position

Machinify is building a security program to protect clients’ sensitive healthcare data and maintain high information-security standards. As part of the Security team, the Security Analyst will manage security assurance operations and help ensure customer requests, audit activities, and compliance processes run smoothly and efficiently. This entry-level role is suited to a detail-oriented, hardworking, and intellectually curious candidate. Cybersecurity experience is helpful but not required; candidates with business operations, finance, accounting, or related experience may also be considered. The role focuses primarily on security assurance operations, including intake and tracking of assurance requests, responding to customer questionnaires and inquiries, maintaining security documentation, and supporting customer-facing calls. It also supports HITRUST r2 and SOC 2 audit preparation, evidence collection, access reviews, policies, vendor risk assessments, security metrics, awareness efforts, and incident response as needed. The position is digital-first and can be performed from anywhere in the US.

Requirements

Bachelor’s degree in Information Security, Business, Operations, Finance, Accounting, or a related field, or equivalent work experience.
Strong attention to detail and follow-through.
Excellent written and verbal communication skills, including comfort communicating with external clients.
Ability to manage multiple concurrent requests and prioritize effectively in a fast-paced environment.
Strong problem-solving orientation, curiosity, and good judgment when approaching unfamiliar situations.
Proficiency with productivity and work-tracking tools, such as ticketing systems, spreadsheets, and document management.

Nice To Haves

1–2 years of experience in operations, compliance, audit support, finance, or a related field.
Exposure to information security concepts, frameworks such as NIST, HITRUST, or SOC 2, or HIPAA compliance.
Experience in healthcare, healthcare technology, or regulated data environments.
Familiarity with GRC or security assurance workflows.

Responsibilities

Review incoming security assurance tickets, triage and prioritize work, assign tasks to appropriate team members, and track requests through resolution.
Independently resolve routine security inquiries and questionnaire items.
Communicate with internal stakeholders and customers, set expectations, and provide status updates throughout the assurance process.
Respond accurately and promptly to customer security questionnaires and audit requests, escalating complex items as appropriate.
Maintain the security documentation repository and ensure materials are current and accessible.
Support customer-facing security calls and presentations alongside senior team members.
Assist with HITRUST r2 and SOC 2 audit preparation and evidence collection.
Coordinate audit activities across internal teams and track open items and deadlines.
Support access reviews and other recurring compliance activities.
Assist with maintaining security policies and procedures.
Track and report security metrics and assurance request status.
Support vendor risk assessment activities.
Assist with security awareness efforts and documentation as needed.
Participate in security incident response when needed.