Job Summary

AuraCare Technologies is seeking a Healthcare Information Security Analyst to safeguard our cloud-based infrastructure and protect critical patient data. In this role, you will be the frontline defender of Protected Health Information (PHI) across our remote patient monitoring network. You will balance technical threat detection with rigorous regulatory compliance, ensuring AuraCare remains a trusted partner for hospitals and hospital networks nationwide.

Key Responsibilities

• Threat Detection & Incident Response: Monitor security information and event management (SIEM) systems to detect, analyze, and mitigate security threats, anomalies, and active incidents.
• HIPAA & HITRUST Compliance: Conduct regular internal audits, risk assessments, and vulnerability scans to maintain continuous compliance with HIPAA, HITRUST, and SOC 2 Type II frameworks.
• Vulnerability Management: Perform automated and manual security testing on software applications, APIs, and cloud infrastructure, prioritizing patching schedules based on risk level.
• Access Control Governance: Oversee User Access Reviews (UAR) and enforce Principle of Least Privilege across all internal employee accounts, engineering environments, and hospital integrations.
• Vendor Risk Assessment: Evaluate the security posture of third-party vendors and API integrations to ensure they meet AuraCare's strict data handling requirements.
• Security Awareness Training: Design and execute internal phishing simulations and annual cybersecurity training modules tailored specifically for healthcare software staff.

Minimum Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (equivalent experience also accepted).
• Experience: 3+ years of professional experience in an information security role, with at least 1-2 years spent within a healthcare organization, digital health company, or hospital system.
• Technical Skills: Hands-on experience with SIEM platforms, endpoint detection and response (EDR) tools, cloud environments (AWS/Azure), and vulnerability scanners (e.g., Nessus, Qualys).
• Framework Knowledge: Thorough understanding of HIPAA Security and Privacy Rules, and familiarity with NIST SP 800-53 or the HITRUST Common Security Framework (CSF).

Preferred Skills

• Active cybersecurity certification such as CompTIA Security+, CEH (Certified Ethical Hacker), HCISPP (Healthcare Certified Information Security and Privacy Practitioner), or CISSP.
• Experience securing data exchange connections (HL7 / FHIR APIs) between cloud environments and hospital systems.