{"id":3169011,"url":"https://alion.io/job/healtheconnections-information-security-and-risk-analyst","title":"Information Security and Risk Analyst","company":{"id":679763,"name":"HealtheConnections","domain":"healtheconnections.org","url":"https://alion.io/company/healtheconnections","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":70000,"max":85000,"currency":"USD","period":"year","gross":null,"usd_annual":85000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false}],"status":"live","first_seen_at":"2026-10-23T16:49:24Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T08:56:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Who: HealtheConnections, a respected national leader in providing health information exchange (HIE) services for NYS-based organizations. \nWhat: We're looking for a Information Security and Risk Analyst to help strengthen our enterprise security and compliance program. This role is ideal for someone with experience in information security, governance, risk, compliance, or IT operations who enjoys building processes, improving security practices, and collaborating across teams to protect sensitive healthcare information. \nWhy: Every day, HealtheConnections supports the secure exchange of healthcare information used by providers and organizations across New York State. You'll help safeguard that information by coordinating vendor security reviews, supporting regulatory compliance, maintaining risk documentation, tracking remediation efforts, and helping ensure we're always audit-ready. \nYou'll work with internal teams, business partners, and vendors to strengthen security processes while supporting a collaborative, high-performing organization whose work has a direct impact on healthcare throughout our communities. \nWe're looking for someone who is organized, proactive, enjoys solving problems, and takes pride in creating well-documented, repeatable processes. \nTalk to us to see if this is a fit for you! \nPrimary Responsibilities:\nConduct third-party security reviews and risk assessments using vendor documentation and/or discussions; document findings, coordinate remediation with technical teams, track issues through resolution, and report results to management. \nReview vulnerability scans and penetration test results; work with vendors, security partners, and service providers to investigate security concerns, gather information, track open issues and remediation thereof, and ensure third parties meet organizational security requirements.\nMaintain security risk registers and other documentation, including Plans of Action and Milestones (POA&Ms) by documenting identified gaps, assigning remediation actions, tracking deadlines, and following up on outstanding items.\nMaintain security, compliance, and requirements for HITRUST, OHIP, and other applicable security initatives.\nDevelop and update security policies, procedures, and operational documentation to reflect current security practices, compliance requirements (e.g., HITRUST), and changes to organizational processes.\nCompile security metrics, dashboards, and reports to communicate risk trends, outstanding vulnerabilities, remediation progress, and compliance status to internal stakeholders.\nSupport security awareness and communication efforts by preparing security reminders, and distributing updates on security practices, policies, and emerging risks. \nWhat this role is and is not:\nThis role is focused on the day-to-day running of the security program. You’ll help us understand where security risks exist, ensure vendors meet our security requirements, support audits and compliance efforts, and track issues through resolution. You’ll work closely with technical teams, but you won’t be the person responsible for hands-on IT troubleshooting, networking, or configuring security tools.\nThis is not an IT help desk or desktop support position. Troubleshooting hardware, software, or end-user issues alone does not prepare you for this role’s core responsibilities.\nCompetencies & Experience:\n3+ years of experience in Information Security, IT Risk, Compliance, Audit, or related field. \nWorking knowledge of HIPAA and healthcare security requirements is strongly preferred.\nFamiliarity with security frameworks such as NIST Cybersecurity Framework, HITRUST, OHIP or similar governance frameworks. \nExperience supporting vendor risk assessments, audit activities, security documentation, or remediation tracking. \nStrong organizational and project management skills, with the ability to prioritize competing demands and follow through on outstanding tasks.\nProven success being the primary manager of a vendor relationship\nSecurity certifications (Security+, CySA+, CISA, CRISC, or similar) or progress toward certification are preferred. \nYou’re a great fit for us if you’re good at… \nStaying organized and managing multiple priorities \nBuilding repeatable processes and maintaining detailed documentation. \nCommunicating effectively with both technical and non-technical stakeholders. \nThinking critically and solving problems with a risk-based mindset. \nFollowing through on projects and proactively driving work to completion. \nCollaborating across departments while maintaining attention to detail. \nWe’re a great fit for you if you’re looking for… \nA high-performance, high-energy, collaborative environment. One of the best things about working here is our team. They’re smart, supportive, passionate, and among the best in the business. \nA dynamic industry. Health information exchange has exciting opportunities on the horizon as the healthcare industry evolves, both within NYS and on the national stage. \nStrong benefits. We cover the cost of medical insurance for employees along with a full suite of benefits, including 401k matching, generous vacation/holiday time, unlimited sick time, flexibility in work hours and hybrid/remote work, and more. \n Work that makes a difference in your community. We’re proud to make an impact on the daily lives of health professionals and support improved health outcomes for individuals right here in New York State. \nIt is important to HealtheConnections that the hiring process is driven by humans. Artificial intelligence (AI) tools do not determine which candidates HealtheConnections chooses to interview or hire. \nWe like to say that we’re “casually competent” - we’re not pretentious, but we know our stuff. Our people are talented, our culture is vibrant, and our work is at the top of its class. Even better, our customers genuinely like working with us, and we’ve seen firsthand how what we do has made a positive impact on our community. \n$70,000-85,000 is the lowest to highest salary that we in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the salary range will be based on several factors including, but not limited to, the prevailing minimum wage for the location, relevant education, qualifications, certifications, experience, skills, and seniority.","description_format":"text","description_chars":6484,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Generous vacation","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-10-23T18:09:34Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":49,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":85000,"is_top_pay":false},"html_url":"https://alion.io/job/healtheconnections-information-security-and-risk-analyst","json_url":"https://alion.io/job/healtheconnections-information-security-and-risk-analyst.json","meta":{"generated_at":"2026-10-25T09:57:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14283,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679763},"rest":"https://alion.io/mcp/rest/get_company?id=679763"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhealtheconnections-information-security-and-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhealtheconnections-information-security-and-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhealtheconnections-information-security-and-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/healtheconnections-information-security-and-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhealtheconnections-information-security-and-risk-analyst"}]}