Cybersecurity Analyst

OSIS

. Perform security risk assessments, audits, and testing to identify vulnerabilities and areas of concern .

Posted 10/14/2026full-timeRemote • United StatesMid-LevelSenior💰 $75,000 - $115,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting Security Risk Assessments and implementing Security Risk Management programs, with a strong focus on compliance with HIPAA, HITECH, and other relevant regulations. Proficient in developing safeguards and technical security controls within a healthcare environment while promoting cybersecurity awareness and training.

Highest-signal resume keywords

Security Risk AssessmentCybersecurity ComplianceTechnical Security ControlsHealthcare Industry ExperienceRisk Management Programs

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk AssessmentVulnerability AssessmentData EncryptionApplication PatchingSecurity Incident ReviewSecurity Control ImplementationRisk Assessment ProcessesTechnical Security ControlsSecurity Threat MonitoringMitigation Planning

Soft Skills

Problem-SolvingCommunicationCustomer ServiceCollaborationTraining

Tools & Technologies

CIS Security BenchmarksSecurity ToolsDevice Management SystemsRemote Work Tools

Certifications & Qualifications

CISSPCISAHCISPPCISMCRISC

Industry Keywords

HIPAAHITECHPCISOXSOC 1 & 2ISOMeaningful UsePromoting InteroperabilityHealthcare Security

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Perform security risk assessments, audits, and testing to identify vulnerabilities and areas of concern
Develop and implement safeguards protecting sensitive and confidential information
Monitor security threats and vulnerabilities and coordinate application and system updates
Implement and support security tools and controls, including data encryption, application patching, and device management
Research and deploy CIS security benchmarks
Review security incidents and procedural violations and provide education to prevent recurrence
Monitor and restrict access to sensitive and high-security information
Partner with users and stakeholders to evaluate workflows, identify security risks, and recommend improvements
Promote cybersecurity awareness and provide security-related training
Serve as a Security Risk Assessment resource for participating health centers, providing training and technical assistance
Assist participating health centers with mitigation plans for identified areas of concern
Participate in state, local, and national collaborations supporting community health centers

Requirements

What you’ll need

Bachelor's degree in Computer Science, Programming, or a related field required
At least three years of computer systems experience, preferably with a specialization in information security
Relevant cybersecurity, compliance, or risk-management certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, or CRISC are preferred
Strong technical knowledge with the ability to evaluate security threats, vulnerabilities, and controls
Excellent problem-solving, communication, customer service, and collaboration skills
Ability to work effectively in a remote environment while managing multiple priorities
Experience in implementing technical security controls within a healthcare environment
Experience developing and implementing Security Risk Management programs
Experience translating cybersecurity regulations and frameworks into practical risk-assessment processes and tools
Experience developing and evaluating technical and process-based security controls
Experience managing security risk assessments and investigations
Experience with HIPAA, HITECH, PCI, SOX, SOC 1 & 2, ISO, and Meaningful Use/Promoting Interoperability
Experience working directly within the healthcare industry

Benefits

Comp & perks

Fully remote position
Limited travel of less than 10%
Occasional evening or weekend work may be necessary based on business needs or project demands