Information Security Analyst

Security Analyst

EnableComp provides Specialty Revenue Cycle Management solutions for healthcare organizations, leveraging over 24 years of industry-leading expertise and its unified E360 RCM intelligent automation platform to improve financial sustainability for hospitals, health systems, and ambulatory surgery centers (ASCs) nationwide. By partnering with clients to supercharge the reimbursement process, EnableComp removes the burden of payment from patients and provider organizations while enabling accelerated cash, higher and more accurate yield, clean AR management, reduced denials, and data-rich performance management. EnableComp is a multi-year recipient the Top Workplaces award and was recognized as Black Book's #1 Specialty Revenue Cycle Management Solution provider in 2024 and is among the top one percent of companies to make the Inc. 5000 list of the fastest-growing private companies in the United States for the last eleven years.

The Security Analyst is responsible for assisting with the day-to-day operations of security program. The Security Analyst is tasked with providing technical expertise in all areas of information security. They will work closely with the security team and other various teams across the business to ensure that systems and networks are designed, developed, deployed, and managed securely. The Security Analyst leads the departmental KPI activities, roadmap tracking as well as monitoring and administering the annual third-party security assessments and client related compliance requests. This role is responsible for managing quarterly security program activities, including access reviews and Internal audit activities. The Security Analyst will research and report on best of breed security products and remain current with emerging cyber technologies and threats that help educate and maintain a secure environment according to Confidentiality, Integrity, Availability control requirements.

Key Responsibilities

• Analyze internal security systems and security related controls to help ensure annual audit compliance, healthcare regulation adherence and corporate ethical standards.
• Assist in the planning and deployment of ongoing security training and education efforts for employees across the organization.
• Liaise with other departmental personnel to ensure that all operational security mechanisms are in place and functioning per compliance controls.
• Assists with developing work plans, roadmaps, meeting schedules, agendas, and other related security project management activities including scheduling meetings, outlining phases, documenting meeting notes, and follow-up activities.
• Help streamline, track, and administer the daily, monthly, quarterly, and annual security compliance related tasks and compliance controls.
• Perform quarterly access review procedures ensuring reviews are conducted, reporting data is collected and stored properly, and any anomalies are identified and properly addressed for remediation.
• Help to lead, manage, and document the third-party vendor procedures and well as answering client requested security questionnaires.
• Learn current audit procedures and assist in the collection and oversight of control evidence.
• Review real-time and historical reports for security and/or compliance violations.
• Monitor online security-related resources for new and emerging cyber threats.
• Help to support and enforce physical security requirements.
• Help to identify and implement security related improvements.
• Other additional duties as assigned.

Requirements and Qualifications

• Bachelor's degree in Computer Science, IT, Business or equivalent work or educational experience
• Security related certifications: S+, CEH, Azure, etc.
• 1-2 years of IT security and compliance-related experience preferred.
• Previous experience within the healthcare industry a plus
• Working experience with the following technology vendors and products: Microsoft Azure cloud, Microsoft O365, Cortex, Qualys, DUO 2FA
• Previous experience in IT systems and networking
• Must have strong computer proficiency and understand how to use basic office applications, including MS Office (Word, Excel, and Outlook).
• Regular and predictable attendance.

Special Considerations and Prerequisites

• Practices and adheres to EnableComp's Core Values, Vision and Mission.
• Engineer, implement and monitor security measures for the protection of computer systems, networks and information.
• Identify and define system security requirements.
• Experience managing servers, particularly virtualized environments.
• Ability to work well with team members to produce results.
• Excellent communication skills, utilized to collaborate both within IT and across all functions of the company to drive IT security initiatives.
• Excellent mentoring and coaching skills to assist in training staff on security directives.
• Design computer security architecture and develop detailed cyber security designs.
• Prepare and document standard operating procedures and protocols.
• Problem solving skills and ability to work under pressure.
• Advises senior management by identifying critical security issues; recommending risk-reduction solutions.
• Solid understanding of HIPAA and applicable compliance frameworks (SOC2, HITRUST)
• Strong project management and technical troubleshooting ability
• Strong writing/documentation skills necessary.
• Ability to articulate security-related concepts to a broad range of technical and non-technical staff.
• Ability to work on larger projects as well as balance day to day requirements.

EnableComp is an Equal Opportunity Employer M/F/D/V. All applicants will be considered for this position based upon experience and knowledge, without regard to race, color, religion, national origin, sexual orientation, ancestry, marital, disabled or veteran status. We are committed to creating and maintaining a workforce environment that is free from any form of discrimination or harassment.

EnableComp recruits, develops and retains the industry's top talent. As the employer of choice in the complex claims industry, EnableComp takes pride in our continuous commitment to building and maintaining a culture centered around fostering the professional growth and development of our people. We believe that investing in our employees is the key to our success, and we are dedicated to providing them with the tools, resources, and support they need to thrive and grow their career here. At EnableComp, we are committed to living up to our core values each and every day, and we believe that this commitment is what sets us apart from other companies. If you are looking for a company that values its employees and is dedicated to helping them achieve their full potential, then EnableComp is the place for you.

Don't just take our word for it! Hear what our people are saying:

"I love my job because everyone shares the same vision and is determined and dedicated. People care about you as a person and your professional growth. There is a genuine spirit of cooperation and shared goals all revolving around helping each other." – Revenue Specialist

"I enjoy working for EnableComp because of the Core Values we believe in. EnableComp stands true to these values from empowering employees to ecstatic clients. This company is family oriented and flexible, along with understanding the balance of work, life, and fun." – Supervisor, Operations