Information Security Analyst

HJ Staffing is seeking an Information Security Analyst to join a prominent Managed Care Plan serving over 456,000 members. In this role, you will be the primary lead in analyzing security practices, investigating breaches, and ensuring the organization remains aligned with rigorous healthcare industry standards. We are looking for a technical expert who can bridge the gap between complex infrastructure and staff education to protect sensitive member data.

• Security Monitoring & Investigation: Monitor computer networks for security issues, lead the investigation of breaches in collaboration with the Information Security Manager, and document damage assessments.
• Compliance & Auditing: Assess the efficacy of existing measures to ensure they meet HIPAA and FISCAM security standards; conduct proactive system vulnerability audits and manage annual penetration testing with vendors.
• Solution Implementation: Participate in the evaluation, design, and implementation of new security solutions, including firewalls and data encryption programs, to protect the organization's computer networks from cyber-attacks.
• Risk Advisory: Analyze software and systems requirements to provide objective advice on security risks and develop clear remediation options for management and senior ITS staff.
• Policy & Documentation: Assist with the development of security policies, procedures, and standards; maintain comprehensive documentation of computer security procedures and tests.
• Training & Phishing Defense: Develop high-impact training materials and presentations to educate the organization on data security, including frequent training on how to detect and avoid phishing attempts.

• Education: Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field (a Master’s degree may substitute for 2 years of experience).
• Experience: 8 years of professional-level IT experience, with at least 3 years specifically performing information security functions in a healthcare environment.
• Certifications: Current CISSP, CISM, or CEH (Certified Ethical Hacker) certification is required.
• Technical Knowledge: Strong understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts, along with proficiency in virtualization and Windows-based systems.
• Regulatory Expertise: In-depth knowledge of HIPAA and FISCAM security guidelines and a working knowledge of frameworks such as NIST, ISO 27001, or COBIT.

• You are a Strategic Problem Solver: You can manage multiple priorities, meet strict deadlines, and adapt to shifting security needs.
• You are an Effective Communicator: You possess clear writing skills and the ability to present complex technical content to non-technical audiences.
• You are Collaborative & Diplomatic: You have the leadership ability to facilitate meetings and build strong relationships across infrastructure and administrative teams.
• You are Proactive: You stay informed of emerging technologies (AI, IoT, blockchain) and look for ways to eliminate technical debt before it becomes a vulnerability.
• You are Incident-Ready: You are willing to respond to after-hours information security incidents as needed.

• Residency Requirement: Candidate must reside in the state of California
  .
• Work Status: 100% Remote; must be a US Citizen or Green Card holder.
• Market Context: This is a competitive role for a major managed care plan; qualified candidates are encouraged to submit their credentials immediately.