Senior Analyst - Business Information Security
HCA Healthcare · Hyderabad · onsite · Posted 65d ago
Undisclosed5–8 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Position Summary
The responsibilities and expectations for a professionalspecializing in security architecture and risk management within regulatedenvironments. Key duties include conducting comprehensive risk assessments,developing and maintaining security frameworks, managing third-party risks,collaborating with cross-functional teams, and ensuring compliance withindustry standards such as HIPAA, ISO, and NIST. The role involves continuousmonitoring, reporting to senior management, and driving improvements in securityposture. Candidates should demonstrate strong communication skills, expertisein regulatory compliance and risk management practices.
- Conduct comprehensive security risk assessments for new and existing systems, applications, and network infrastructure.
- Develop, implement, and maintain security frameworks, standards, and best practices across the organization.
- Oversee third-party risk management (TPRM), including due diligence, assessment, and continuous monitoring of vendor security posture.
- Collaborate with IT, engineering, and business teams to identify and mitigate security risks in design and deployment.
- Perform Security Architecture reviews, risk assessments and gap analysis on critical assets and business processes.
- Advise stakeholders on security solutions and controls, ensuring alignment with regulatory and industry standards (HIPAA, ISO 27001, NIST CSF 2.0, GDPR, DPDPA).
- Respond to emerging threats and vulnerabilities by recommending proactive security measures.
- Prepare and deliver clear reports on architectural and risk findings to senior management. Support compliance initiatives and internal or external audits related to security and risk management.
- Conduct Privacy Impact Assessments (PIAs) and evaluate privacy risks to ensure compliance with DPDPA, HIPAA, and GDPR across systems and business processes. Identify data protection gaps, recommend mitigation strategies, and support the implementation of controls to safeguard sensitive and personal information.
- Drive continuous improvement in security architecture, risk practices, and awareness throughout the organization.
- Participate in special projects and other duties as assigned, driving ongoing improvement in security posture, risk management, and protection of sensitive information.
What would your work week be like?
- Conduct risk assessments and manage third-party vendor reviews or renewals.
- Participate in meetings with engineering, compliance, and business teams to discuss security requirements and remediation plans.
- Review and evaluate architecture diagrams and technical designs for ongoing and upcoming projects.
- Monitor security controls, metrics, incident reports, and issues to identify and respond to risks or weaknesses.
- Prepare documentation, executive summaries, and presentations for decision makers and stakeholders.
Required Qualifications
- Bachelors degree in information technology, Computer Science, or a related field, along with 5 or more years of relevant experience.
- A professional with strong experience in both security, architecture and risk management, ideally in complex or regulated environments.
- Proven ability to communicate technical concepts and security risks to both technical and non-technical audiences.
- Experience conducting third-party risk assessments and managing vendor relationships.
- Expertise in industry standards, regulatory compliance, and security frameworks.
- A proactive problem-solver with excellent analytical, organizational, and stakeholder management skills.
- Basic knowledge of AI technologies such as Generative AI, Artificial Neural Networks (ANN), Convolutional Neural Networks (CNN), and AI security.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
Due Diligencegap analysisai technologiesIso 27001data protectionGdprauditshipaaDPDPAai securitydeploymentCommunication SkillsArchitectureInformation SecurityInformation TechnologycomplianceGenerative AiArtificial Intelligence
About HCA Healthcare
HCA Healthcare
Healthcare
4.0k+
employees
Nashville, TN
USA
₹17.9L PA avg
Avg at HCA Healthcare
About
HCA Healthcare - India is an integral innovation and operational hub in support of HCA Healthcare and our mission: Above all else, we are committed to the care and improvement of human life. HCA Healthcare is a company focused on creating healthier tomorrows through the delivery of patient-centered care across approximately 190 hospitals and 2,400 sites of care in the United States and United Kingdom.
Every day, our colleagues around the world go to work with a collective focus: our patients. This focus positively impacts the care experience at the bedside and beyond. HCA Healthcare - India serves as a vital hub for operations and supports HCA Healthcares work to enhance healthcare delivery through technology and innovation.
Industries
Healthcare
Employee ratings
9 reviews
4.7/ 5
Culture
4.3
Career growth
3.3
Work-life
4.1
Employees rate it well for
Company Culture47Job Security47
Find them on