Information Security Analyst

Description:

About Gifthealth
At Gifthealth, we’re on a mission to make pharmacy easier and more affordable for patients and providers nationwide. In just a short time, we’ve served thousands of patients and are rapidly expanding across the country. Health is our most precious gift, and we believe it should be a priority, not a privilege.

Position Overview
We are seeking a detail-oriented, proactive, problem-solving Information Security Analyst to join our growing team at our Columbus, OH headquarters. In this role, you will be responsible for monitoring, assessing, and responding to security threats, ensuring our systems comply with healthcare regulations such as HIPAA, and implementing best practices to safeguard customer and company data.

How You’ll Help Us Grow

• Investigate and respond to incidents and alerts, performing root cause analysis and remediation. Enhance and update alerting based on real world scenarios.
• Maintain and enforce security policies, procedures, and controls aligned with HIPAA, PCI-DSS, and NIST frameworks.
• Perform regular vulnerability scans of a wide array of endpoint devices and assist in patch management efforts.
• Support third-party risk assessments and security audits.
• Collaborate and clearly communicate with IT, Development, and Compliance teams to implement secure development practices.
• Maintain knowledge of latest threats and best practices in cybersecurity and healthcare compliance.
• Assist with the implementation and development of a SIEM solution in accordance with industry best practice and regulatory requirements.

Requirements:

A Few Things About You

• 2+ years of experience in information security or cybersecurity roles. This can include providing software support for security-related software.
• Knowledge of HIPAA, HITECH, and other healthcare privacy/security laws.
• Experience with security tools such as firewalls, IDS/IPS, endpoint protection, vulnerability management, patch deployment, and SIEM systems.
• Understanding of network protocols, system hardening, and secure configurations.
• Familiarity with cloud platforms (AWS, GCP, etc.) and their security services.
• Strong ability to understand complex systems and their relations, problem-solving skills, and attention to detail.

Preferred Qualifications:

• Professional certifications such as Security+, CEH, GIAC, etc.
• Experience working in or with online pharmacies, healthcare IT, or e-commerce.

Our Offer To Ensure You Choose Gifthealth

• Competitive salary and comprehensive benefits package (healthcare, dental, vision).
• Retirement savings plan (401k) with company match.
• Generous paid time off.
• Continuous professional development opportunities in a supportive and innovative work environment.
• A chance to be at the forefront of transforming pharmacy and directly impacting patient care.

Gifthealth is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Join us in transforming healthcare and building the teams that make it happen. Apply today!