Senior Information Security Analyst (HIPAA / GRC ) (US, Field)

Job Overview Life. Unlimited. At Smith+Ne phew we design and manufacture technology that takes the limits off living. Join us as an Information Security Compliance Analyst and play a key role in shaping and delivering our annual HIPAA programme . This is an opportunity to work closely with leaders across Governance, Risk and Compliance, with support and guidance from senior experts while owning essential programme activities that help protect our patients, people and systems. Responsibilities Drive the annual HIPAA programme as the central coordinating function. Plan the programme’s schedule, coordinate with partners and ensure smooth operation throughout the year. Oversee the annual Security Risk Assessment, shaping its scope and collaborating with third‑party specialists to ensure effective delivery. Conduct security assessments on IT systems, record outcomes, track actions and keep documentation and workflows in OneTrust consistently updated. Monitor changes in HIPAA law, support updates to internal policy and bring insights and recommendations to leadership and the Steering Committee. Blend hands‑on security experience with strong organisational and leadership skills to keep the programme on schedule. Translate security controls into clear activities, understand their practical application and turn complex challenges into structured actions. Maintain a continuous‑improvement mindset and contribute to the growth of the HIPAA programme year after year. Qualifications Bachelor’s degree in Computer Science or a related subject (preferred). At least 5 years of experience in Information Security, including a component in a compliance function. At least 2 years of experience working on HIPAA compliance. At least 3 years of experience in Program or Project Management. Prior experience in Privacy Law related Security Controls compliance is highly valued. Experience deploying and assessing Information Security controls aligned to frameworks such as HIPAA, GDPR, TOMS, ISO27001, HiTrust or NIST. Familiarity with tools such as OneTrust or other IT risk management platforms, or a demonstrated ability to learn them quickly. Certifications Privacy or Security certifications such as CHPS, CHSE, CIPP/US, CISA, CISSP, ISO27001 or equivalent (advantageous but not essential). Travel & Compensation Travel Requirements: The anticipated base compensation range for this position is $111,750 to $167,500 USD annually. Benefits Medical, dental, and vision coverage; 401(k); tuition reimbursement; medical leave; parental leave; generous PTO; paid company holidays; 8 hours of volunteer time annually; wellness offerings including EAP. Inclusion and Belonging initiatives with Employee Inclusion Groups. 401(k) Matching Program; 401(k) Plus Program; Discounted Stock Options; Tuition Reimbursement. Flexible Personal/Vacation Time Off, Paid Holidays, Flex Holidays, Paid Community Service Day. Health Savings Account (Employer Contribution of $500+ annually); Employee Assistance Program; Fertility and Adoption Assistance Program. Training: Hands‑On, Team‑Customized, Mentorship. Additional Perks: Discounts on fitness clubs, travel and more. Equal Opportunity Employer Smith+Ne phew provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability. #J-18808-Ljbffr