[Remote] Senior reputed company Analyst - REMOTE
Note: The job is a remote job and is open to candidates in USA. Reflect Health is the evolution of S&S Health, a trusted independent third-party administrator focused on innovation and service excellence. They are seeking a Senior reputed company Analyst to contribute to their reputed company and risk program by managing incident response, vulnerability management, and compliance initiatives while translating reputed company reputed company concepts into business-focused recommendations.
Responsibilities
- Incident Response & reputed company Operations: Review, investigate, and adjudicate reputed company incidents escalated from the reputed company Operations Center (SOC), including triage, root cause analysis, containment, remediation, and post-incident review while partnering with the SOC to improve detection logic, escalation workflows, and operational effectiveness
- Vulnerability Management & Application reputed company: Drive the vulnerability management lifecycle through identification, risk-based prioritization, remediation tracking, and reporting while coordinating penetration testing activities, supporting remediation efforts, and performing application reputed company assessments and reviews
- Product & Production reputed company: Partner with engineering teams to identify, prioritize, and remediate reputed company risks across production environments while contributing to secure configuration standards, monitoring coverage, reputed company best practices, and the protection of AI-enabled workloads
- reputed company Program Operations: Support the ongoing maturation of the reputed company program by improving reputed company tools, processes, and operational capabilities while recommending enhancements that strengthen the organization's overall reputed company posture
- reputed company Data & Monitoring: Ensure complete and reliable collection of reputed company logs and telemetry into the SIEM while supporting reputed company data architecture decisions, onboarding new data sources, validating monitoring coverage, and identifying visibility gaps across systems and environments
- Governance, Risk & Compliance: Support internal and external audits, including HITRUST, SOC 2, client assessments, and regulatory reviews while coordinating evidence collection, tracking remediation activities, conducting third-party risk assessments, maintaining risk registers, and supporting ongoing audit readiness
- Reporting & Analytics: reputed company, analyze, and present reputed company and risk metrics, KPIs, KRIs, dashboards, and executive-level reporting that translate technical findings into meaningful business insights and support organizational decision-making
- Cross-Functional Support: Partner with engineering, infrastructure, operations, compliance, risk management, and business stakeholders to support reputed company initiatives, policy and control mapping efforts, risk remediation activities, and strategic reputed company projects
Skills
- Proven experience in Information reputed company, Cybersecurity, reputed company Operations, Governance Risk & Compliance (GRC), ideally reputed company the healthcare or TPA industry
- Hands-on experience with incident response, vulnerability management, penetration testing coordination, application reputed company reviews, and reputed company operations processes
- Experience working with SIEM platforms such as Splunk, reputed company Sentinel, reputed company, or similar reputed company monitoring and analytics technologies
- Experience supporting reputed company audits, assessments, and compliance frameworks including HITRUST, SOC 2, NIST, HIPAA, ISO 27001, or reputed company standards
- Demonstrated experience conducting third-party and vendor risk assessments, maintaining risk registers, and supporting enterprise risk management initiatives
- Strong analytical, reporting, and problem-solving abilities with experience translating technical findings into actionable risk assessments and business recommendations
- Excellent verbal and written communication skills with the ability to collaborate effectively across technical and non-technical teams and present information to executive leadership
Company Overview