QuadMed provides value-driven health and wellness services to employers and their employees. The IT Security Analyst supports information security, risk management, and compliance programs by conducting audits, monitoring controls, coordinating assessments, managing risk documentation, and supporting remediation and awareness activities.
Conducts reviews of organizational and functional activities, evaluating the adequacy and effectiveness of information technology security controls. (IT General Controls/Splunk/Nessus/3rd Party)
Performs regular audits and participates in a variety of special projects to improve systems or processes and/or to reduce organizational risks. (IT General Controls, SOC2, PCI, HIPAA)
Assists with the development of risk and threat matrices to track organizational risks and mitigation efforts. (Scorecards, Security reporting, System vulnerability tracking)
Coordinates and assists with third party audits and assessments (HIPAA, Risk, DR, PCI, SOC2)
Assists with security risk assessments for new and current third-party vendors. (VSQ, BDS, SOC 2)
Collaborates with other departments to implement process improvement or remediation activities as generated by findings from internal / external audits
Utilizes reporting tools to identify questionable user behaviors such as inappropriate access, irregular usage patterns, excessive account lock outs or other activities
Identifies, prepares and maintains appropriate and required data, records, reports and other documentation relevant to carrying out all the above activities and assists with reporting the business’ performance in these areas
Coordinates employee education, awareness, training and testing activities including phish and insider threat testing
Actively seeks knowledge of new, automated, or more efficient auditing and monitoring techniques to increase departmental and/or organizational efficiency and effectiveness
Helps coordinate the reviews of system documentation, and security or compliance related policies and procedures
Performs other duties as assigned to support departmental initiatives as well as overall strategic goals and objectives of the Company
Qualification
Required
Bachelor's Degree from a four-year college or university in business, healthcare, information technology, security or a related field required
Requires analytical and problem-solving skills to ensure that internal controls, policies and procedures are being followed consistently in order to safeguard the Company's assets, verify the accuracy and reliability of its data, and promote adherence to the prescribed policies, resulting in recommendations that add value for process improvements throughout all areas of the organization
Individual must possess excellent attention to detail, strong writing and verbal communications skills, and be able to make critical decisions based on data analysis
Highly collaborative individual with ability to influence others and build strong professional relationships
Maintains a high degree of creditability, independence, integrity, confidentiality and trust
Ability to work independently, make independent judgments and set priorities
Demonstrated ability to research, compile and analyze regulatory and business information, assess compliance or other business risks, and provide feedback as to resolutions or recommendations for process improvement
Proven ability to work effectively with diverse populations and a demonstrated commitment to fostering inclusion
May require occasional travel
Preferred
The ideal candidate will have at least one (1) year experience in a healthcare setting, most notably in a HIPAA, privacy, security or audit/compliance-related role
Certifications in areas of healthcare compliance, privacy, security, health information management, risk management assurance, internal auditing, and/or Epic Systems preferred
Knowledge of healthcare laws and regulations, auditing and monitoring principles, risk management, electronic health record systems and a strong ability to interpret and present multifaceted concepts and analyses
Knowledge and experience with HIPAA and other privacy-related regulations and the application of these regulations in a healthcare setting, or a similar job that required interpretation of complex regulations and communication of same to all levels of workforce
Benefits
Remote role with occasional travel.
For eligible employees: medical, prescription, dental and vision insurance, 401(k) retirement savings, paid time off, holidays and additional benefits.
Quad is a marketing agency that helps brands reimagine their marketing to be streamlined and flexible.
Glassdoor
3.3
Founded in 1971
Sussex, Wisconsin, USA
10001+ employees
https://www.quad.com
Quad is a marketing agency that helps brands reimagine their marketing to be streamlined and flexible.
