Information Security Analyst

• Location: Remote
• Department: Compliance
• Employment Type: Full-Time
• Reports To: Manager / Sr Manager - Compliance Team

About Us

We are a HITRUST-certified Business Associate (BA) operating in the healthcare space, committed to securing sensitive health data and ensuring full compliance with HIPAA Security, Privacy, and Breach Notification Rules. Our Information Security & Compliance team plays a critical role in protecting data, building trust with clients, and supporting regulatory adherence across the organization.

Job Summary

This role is ideal for a people-oriented, proactive communicator who enjoys collaborating with diverse teams, coordinating training and onboarding sessions, and being the bridge between compliance, IT, and business stakeholders. While a foundational understanding of information security and compliance is expected, strong communication, facilitation, and stakeholder engagement skills are the true keys to success in this position.

Fresh graduates with an interest in cybersecurity, compliance, and stakeholder coordination are encouraged to apply. Full training, mentorship, and hands-on project involvement will be provided.

Key Responsibilities

• Facilitate security awareness and compliance training sessions during employee onboarding and ongoing engagements.
• Act as a point of contact for internal teams and external clients regarding compliance-related queries.
• Help coordinate meetings, compliance walkthroughs, and documentation reviews across IT, HR, Legal, and client teams.
• Assist in client assessments,

  RFPs, RFIs

  , and security questionnaires by working closely with SMEs.
• Collaborate with IT and operations to ensure Change Management and Access Control practices are followed and well-documented.
• Support the incident response process, including maintaining logs and facilitating communication between teams.
• Help manage internal documentation: policies, procedures, training materials, and reports.
• Track changes in industry regulations and communicate implications to relevant stakeholders in a clear, understandable manner.
• Participate in internal and external audits by organizing evidence, facilitating interviews, and ensuring preparedness.

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, Engineering, or a related field.
• Strong interest in compliance, data privacy, communication, and cross-functional collaboration.
• Excellent verbal and written communication skills; ability to convey technical concepts to non-technical audiences.
• Comfortable conducting presentations, hosting sessions, and coordinating with multiple stakeholders.
• Detail-oriented with a proactive, organized approach to work.
• Willingness to work the 4:00 PM – 1:30 AM IST shift to support U.S.-based clients.

Preferred Qualifications

• Familiarity with HIPAA, HITRUST, ISO 27001, or NIST frameworks.
• Exposure to GRC tools, IT controls, or compliance documentation (preferred, not mandatory).

• 27001:2022 Lead Auditor certification is a plus, but not required

  .

Why Join Us?

• Be the communication hub for a fast-paced, compliance-driven team working in the healthcare sector.
• Gain real-world experience in HITRUST, HIPAA, and global cybersecurity frameworks.
• Collaborate with IT, Legal, HR, and client teams on meaningful projects that protect sensitive data.

Work in a supportive, learning-focused environment with clear career growth opportunities in compliance, training, and stakeholder engagement