Senior Cybersecurity Analyst

Rad AI

2d•Remote

About The Position

Rad AI is redefining the boundaries of artificial intelligence in healthcare. As our Senior Cybersecurity Analyst, you will play a critical role in securing the company, driving compliance programs, managing risks, and serving as a trusted partner to customers and internal teams alike. This is not a purely technical role: it demands equal parts audit, security expertise, project management discipline, and clear communication. This role will report directly to the Director of IT & Cybersecurity.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a related field.
6+ years of experience in cybersecurity, with at least 2 years of hands-on involvement in compliance programs or security audits.
Demonstrated experience leading or significantly contributing to SOC 2 through full audit lifecycle.
Practical knowledge of risk management frameworks (NIST RMF, ISO 42001, FAIR) and risk treatment processes.
Experience responding to enterprise customer security questionnaires and interfacing directly with customers on security topics.
Strong project management skills with the ability to manage multiple concurrent workstreams in a fast-paced environment.
Ability to communicate complex security and compliance topics clearly to both technical and non-technical audiences, including in customer-facing settings.
Experience reviewing and maintaining information security policies and procedures.
Active security certifications; ideally a CISSP and CISA.

Nice To Haves

Healthcare industry experience and understanding of healthcare data handling obligations.
Experience with project management methodologies (PMP, Agile, Scrum) or formal project management training.
Familiarity with additional compliance frameworks: ISO 27001, NIST CSF, or HITRUST.
Knowledge of DevSecOps practices and integration of security into CI/CD pipelines.

Responsibilities

Manage SOC 2 Type II audit cycles from scoping through evidence collection to final report, serving as the primary point of contact for auditors and collaborators.
Coordinate HIPAA compliance assessments, including risk analyses, policy reviews, and Business Associate Agreement (BAA) management.
Conduct structured gap analyses against applicable frameworks (SOC 2, HIPAA, ISO 42001, NIST CSF) to identify control deficiencies and develop prioritized remediation roadmaps.
Track risk mitigation and remediation plans, ensuring accountability and measurable progress against accepted risk thresholds.
Serve as the primary responder to enterprise customer security questionnaires, and engage directly with customers and prospects.
Demonstrate a solid understanding of system and data architecture, including cloud infrastructure, data flows, and access controls, in order to answer technical assessment questions accurately and confidently.
Develop and maintain a reusable security response library (trust portal, standard questionnaire answers, and diagrams) to accelerate future engagements.
Act as a security partner to Engineering, Product, Legal, Sales, and Customer Success, translating security requirements into actionable guidance for non-security audiences.
Participate in architecture and design reviews, ensuring new systems and features meet security and compliance requirements before deployment.
Maintain fluency in artificial intelligence and automation technologies, understanding their security and compliance implications within Rad AI’s platforms.
Leverage AI-assisted tools to improve security operations efficiency, including threat analysis, automated evidence collection, and other cybersecurity workflows.