IT Security Analyst

Position: IT Security Analyst, QuadMed

Creating a better way. It’s more than just the philosophy we were founded on. It’s our purpose. For our employees, it means more time with patients. Unrushed visits to build meaningful relationships. And most importantly, an opportunity to empower our patients to achieve their full potential – at work and in life. Determined to make a difference? Join our health care revolution and be a part of something better.

Quad Med is looking for an IT Security Analyst to join our Quad Med IT team. This is a remote role with occasional travel.

General purpose of job

The IT Security Analyst assists the Director of Information Security and Compliance in developing, coordinating, and supporting the overall objectives of Quad Med’s information security, risk management and compliance programs. This includes participating in special projects, developing and implementing information security and compliance auditing and monitoring activities, and identifying opportunities to improve Quad Med’s overall risk posture.

Key responsibilities

• Conducts reviews of organizational and functional activities, evaluating the adequacy and effectiveness of information technology security controls. (IT General Controls/Splunk/Nessus/3rd Party)
• Performs regular audits and participates in a variety of special projects to improve systems or processes and/or to reduce organizational risks. (IT General Controls, SOC2, PCI, HIPAA)
• Assists with the development of risk and threat matrices to track organizational risks and mitigation efforts. (Scorecards, Security reporting, System vulnerability tracking)
• Coordinates and assists with third party audits and assessments (HIPAA, Risk, DR, PCI, SOC2).
• Assists with security risk assessments for new and current third-party vendors. (VSQ, BDS, SOC
  2)
• Collaborates with other departments to implement process improvement or remediation activities as generated by findings from internal / external audits.
• Utilizes reporting tools to identify questionable user behaviors such as inappropriate access, irregular usage patterns, excessive account lock outs or other activities.
• Identifies, prepares and maintains appropriate and required data, records, reports and other documentation relevant to carrying outalltheabove activities and assists with reporting the business’ performance in these areas.
• Coordinates employee education, awareness, training and testing activities including phish and insider threat testing.
• Actively seeks knowledge of new, automated, or more efficient auditing and monitoring techniques to increase departmental and/or organizational efficiency and effectiveness.
• Helps coordinate the reviews of system documentation, and security or compliance related policies and procedures.
• Performs other duties as assigned to support departmental initiatives as well as overall strategic goals and objectives of the Company.

Job requirements Education

• Bachelor’s Degree from a four-year college or university in business, healthcare, information technology, security or a related field required

Experience

• The ideal candidate will have at least one (1) year experience in a healthcare setting, most notably in a HIPAA, privacy, security or audit/compliance-related role.

Certificates, Licenses, Registrations

• Certifications in areas of healthcare compliance, privacy, security, health information management, risk management assurance, internal auditing, and/or Epic Systems preferred

Knowledge, Skills & Abilities

• Knowledge of healthcare laws and regulations, auditing and monitoring principles, risk management, electronic health record systems and a strong ability to interpret and present multifaceted concepts and analyses.
• Knowledge and experience with HIPAA and other privacy-related regulations and the application of…