Associate Security Analyst

Associate Security Analyst

This opportunity is remote

We are more than just a healthcare company; we are a community of professionals driven by the knowledge that our success leads to a positive impact on the communities that we support.

At ComplexCare Solutions, you’ll play a crucial part in innovating solutions that empower health plan members and healthcare providers alike. Our collaborative environment fosters creativity and initiative, ensuring that every idea and effort contributes to meaningful change in the industry. Join us and become a part of a team that turns vision into action, making a tangible impact on the future of healthcare.

Overview: The Associate Security Analyst is responsible for administering and enhancing the security governance, risk and compliance program. This role will work with the Security Team to help drive process and technical capabilities that will guide us toward operational excellence.

Duties and Responsibilities

• Support the security governance program by assisting with the development, maintenance, and periodic review of security policies, standards, and procedures.
• Support the security risk management program by assisting with risk identification, documentation, tracking, and reporting.
• Conduct and review customer security and privacy due‑diligence questionnaires, including evidence collection, analysis, and response coordination.
• Participate in information classification and data protection activities, including supporting classification guidance and documentation.
• Coordinate with Security Engineering, Security Operations, Legal, Compliance, and Privacy teams to support governance-related initiatives and documentation.
• Administration and maintenance of Microsoft 365 Security and Compliance tooling.
• Provide support during security incidents by assisting with documentation, evidence collection, and post-incident activities, as needed.
• Support regulatory and industry compliance activities, including preparation and evidence support for frameworks such as SOC 2 and HITRUST.
• Adhere to all confidentiality, HIPAA, regulatory, and other such policies, procedures, and requirements as outlined within Employer’s Operating Policies and Procedures with respect to any aspect of the data handled or services rendered in the scope of work.
• Maintain compliance with CCS’s policies and mission statement.
• Fulfill those responsibilities and/or duties that may be reasonably provided by CCS for the purpose of achieving operational and financial success of the Company

Job Requirements

• Minimum of 2+ years of experience in information security or equivalent skills in the security domain.
• Knowledge of risk management activities.
• Knowledge of customer security assessment and questionnaire management (i.e. SIG questionnaire).
• Strong organizational, planning, and project management skills with the ability to prioritize and meet deadlines.
• Knowledge of security objective frameworks, such as SOC-2, HITRUST, and ISO 27001/2.
• Must have good communication skills and ability to work with cross-functional groups and multiple organizational levels to achieve results.

Education Requirements

• Associate degree required; or
• Bachelor’s degree or equivalent experience; and
• Possession of industry certifications is preferred.

ComplexCare Solutions offer competitive compensation as well as benefits.

The Company is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other protected characteristic under federal, state, or other applicable laws. 

This company utilizes E-verify