Sr. IT Security Analyst Role - US healthcare Analytics Org.

About Us

SpectraMedix is at the forefront of transforming healthcare, empowering health plans and health systems with the tools and insights they need to provide better, more cost-effective care to the communities they serve. Our cutting-edge platform delivers advanced analytics that help organizations excel in the transition to new value-based payment (VBP) models.

By combining advanced technology with a team of seasoned experts, we provide a unique solution tailored to meet the needs of the healthcare industry during this critical phase of value-based care evolution. Our platform is strategically designed to guide health plans, accountable care organizations, and health systems in their journey toward achieving success in value-based payment initiatives.

We are committed to creating an environment where innovation thrives, employees are empowered to drive meaningful change, and every team member plays a key role in reshaping the value and quality equation in healthcare. Our organizations long-term stability is grounded in this commitment, and we prioritize our employees' growth, well-being, and success as the foundation for a thriving futureboth for them and for the communities we serve.

Position: Sr. Security Analyst

Experience: 6-8 Years

Location: Gurgaon

Mode: Hybrid

Role Overview:

The IT Security Analyst is a member the Information Technology & Security department responsible for implementing, monitoring and managing information privacy and security measures for SpectraMedix offshore on-premises, US-based co-located datacenter and cloud-hosted IT infrastructure. The IT Security Analyst should have the necessary systems, network and Microsoft Azure expertise and job experience to work effectively with peers in the analysis, maintenance, monitoring and hardening of network and system devices supporting software development, test and production environments, as well as administering and maintaining SpectraMedix System Security Plan.

Key Responsibilities-

• Participate in internal privacy and security risk assessments and reviews
• Analyze security compliance related to software product development, technical infrastructure advancements and potential threats related disaster recovery/business continuity to ensure alignment with internal security policies and procedures and IT security industry best practices
• Support external compliance assessments and audits for security standards and frameworks, such as ISO 27001, CSA-CCM, HIPAA, CSA CCM, SOC 1 / SOC 2, HITRUST, NIST, SOC-2 etc.
• Perform penetration testing, vulnerability scanning, evaluate ethical hacking scenarios and assess potential threats to firewall, server and PC security
• Assess risks and oversee OS and application software security updates and patches
• Maintain the information security program's documentation, including policies, procedures, checklists and guidelines
• Organize ratification of the rules and standards on a regular basis as per organization policy
• Take part in enhancing SpectraMedix’ overall IT security culture, set up employee security awareness programs and trainings to address potential risk areas and/or compliance gaps.
• Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding and encryption.

Required Skills Experience-

• 6 Years’ experience, graduate with any IT / cloud security certification (viz: GSEC, OSCP, CISA, CISM, CISSP, CIPP/E, CIPM, etc.) is preferred
• Experience in security / compliance implementation (viz: ISO / CSA CCM / HIPAA / HITRUST, etc.)
• Knowledge of TCP/IP, network security systems and protocols including firewalls, HTTPS, SFTP, SSH, VPNs, encryption, etc.
• Knowledge of different cybersecurity applications and technologies to implement security and monitoring policies (e.g., Azure Monitor, Sophos, SolarWinds, Manage Engine, Log360, etc.)
• Event monitoring and root cause analysis experience
• Experience in working with Incident Response teams and managing stakeholder expectations

Preferred Skills-

US Healthcare compliance experience such as HIPPA, HITRUST etc. will be big plus