Security Analyst (GRC)

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 85 health plans, including many of the top 20, and representing more than 270 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We’re constantly reimagining what’s possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

About the Opportunity

At Machinify, we’re building a robust security program to protect our clients’ sensitive healthcare data and maintain the highest standards of information security. As part of the Security team, you will play a central role in managing our security assurance operations - helping ensure that customer requests, audit activities, and compliance processes run smoothly and efficiently.

This is an entry-level role suited for someone detail-oriented, hardworking, and intellectually curious. A background in cybersecurity is helpful but not required. We’ll consider candidates with experience in business operations, finance, accounting, or related fields who demonstrate strong organizational instincts and a commitment to doing things right.

What You’ll Do

Security Assurance Operations (60% of role)

• Own the intake process for security assurance requests: review incoming tickets, triage and prioritize work, assign tasks to the appropriate team members, and track requests to resolution
• Resolve routine and straightforward security inquiries and questionnaire items independently
• Communicate clearly with internal stakeholders and customers throughout the assurance process, setting expectations and providing status updates
• Respond to customer security questionnaires and audit requests with accuracy and timeliness, escalating complex items as appropriate
• Maintain the security documentation repository and ensure materials are current and accessible
• Support customer-facing security calls and presentations alongside senior team members

Audit and Compliance Support (25% of role)

• Assist with HITRUST r2 and SOC 2 audit preparation and evidence collection
• Help coordinate audit activities across internal teams, tracking open items and deadlines
• Support access review processes and other recurring compliance activities
• Assist with security policy and procedure maintenance

General Security Program Support (15% of role)

• Track and report on security metrics and assurance request status
• Support vendor risk assessment activities
• Assist with security awareness efforts and documentation as needed
• Participate in security incident response when needed

What You Bring

Essential Qualifications

• Bachelor’s degree in Information Security, Business, Operations, Finance, Accounting, or a related field, or equivalent work experience
• Strong attention to detail and follow-through - you catch things others miss and see tasks through to completion
• Excellent written and verbal communication skills, including comfort communicating with external clients
• Ability to manage multiple concurrent requests and prioritize effectively in a fast-paced environment
• Strong problem-solving orientation; you approach unfamiliar situations with curiosity and good judgment
• Proficiency with productivity and work-tracking tools (ticketing systems, spreadsheets, document management)

Preferred Qualifications

• 1-2 years of experience in operations, compliance, audit support, finance, or a related field
• Exposure to information security concepts, frameworks (NIST, HITRUST, SOC 2), or HIPAA compliance
• Experience in healthcare, healthcare technology, or working with regulated data environments
• Familiarity with GRC or security assurance workflows

What We Offer

• Work from anywhere in the US! Machinify is digital-first.
• Top Medical/Dental/Vision offerings
• FSA/HSA
• Tuition reimbursement
• Competitive salary, 401(k) with company match
• Additional health and wellness benefits and perks
• Flexible and trusting environment where you’ll feel empowered to do your best work

The salary for this position is based on an array of factors unique to each candidate: Such as years and depth of experience, set skills, certifications, etc.  We are hiring for different levels, and our Recruiting team will let you know if you qualify for a different role/range. 

Pay range: $70,000-$95,000

Equal Employment Opportunity at Machinify

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. Machinify is an employment at will employer. We participate in E-Verify as required by applicable law. In accordance with applicable state laws, we do not inquire about salary history during the recruitment process. If you require a reasonable accommodation to complete any part of the application or recruitment process, please let our recruiters know. See our Candidate Privacy Notice at:  https://www.machinify.com/candidate-privacy-notice/