Information Security Analyst

SIMPLIFY GROUP

JOB DESCRIPTION

Information Security Analyst

Department Compliance
Experience 2 - 4 Years

Employment Type Full-Time

Role Overview
We are looking for an Information Security Analyst with 2-4 years of hands-on experience in Governance, Risk & Compliance (GRC), information security compliance, and audit support. The ideal candidate will have practical exposure to ISO 27001:2022, SOC 2, HITRUST, risk management, security documentation, and compliance activities.
Key Responsibilities

• Support the implementation and ongoing maintenance of information security controls and processes.
• Support ISO 27001, SOC 2, HITRUST, and other information security audits and compliance assessments.
• Conduct information security and organizational risk assessments and maintain risk registers.
• Identify, document, and track risks, control gaps, and remediation actions through closure.
• Manage and maintain information security policies, procedures, standards, and compliance documentation.
• Support periodic review and updates of security policies and controls to ensure continued compliance.
• Support vendor and third-party security risk assessments and track remediation activities.
• Coordinate with internal stakeholders to collect audit evidence and ensure timely closure of compliance requirements.
• Maintain appropriate records and documentation for audits, assessments, and compliance reporting.
• Support continuous improvement of the organization's information security and GRC processes.

Required Qualifications & Skills

• 2 -4 years of experience in Information Security, GRC, IT Risk, Compliance, or a related field.
• Working knowledge of ISO 27001:2022, SOC 2, HITRUST, and information security risk management.
• Hands-on experience supporting security audits, assessments, and compliance activities.
• Experience with risk assessments, risk registers, and remediation tracking.
• Strong documentation, analytical, and organizational skills.
• Excellent written and verbal communication skills.
• Ability to collaborate effectively with cross-functional teams and stakeholders.

Preferred Qualifications

• ISO 27001 certification is preferred.
• Exposure to third-party/vendor risk management processes.
• Experience with GRC or compliance management tools.
• Experience in a SaaS, healthcare technology, or regulated industry environment is an advantage.

Simplify Group | Information Security Analyst