Senior Security Analyst

Key Responsibilities:
Assess HIPAA security controls and identify gaps.
Perform security risk assessments for systems handling PHI.
Prepare audit documentation, evidence, and risk reports.
Review security controls across Microsoft 365, AWS, and Salesforce.
Support remediation of security findings and compliance gaps.
Map security controls to HIPAA and NIST frameworks.

Required Skills:
Hands-on experience with HIPAA Security Rule and PHI protection.
Microsoft 365 security, Entra ID, Conditional Access, Purview, and DLP.
AWS security, IAM, encryption, and logging.
Security risk assessments, audit readiness, and GRC tools.
Knowledge of NIST 800-53, ISO 27001, or HITRUST.

Healthcare, pharmaceutical, or patient-support program experience is a plus.