[Hiring] GRC Security Analyst @Curana Health, Inc.

Role Description

Curana Health is seeking an IT Governance, Risk, and Compliance Analyst to join our IT Security and Governance team. In this role, you will help strengthen our security and compliance programs by supporting:

• Risk management
• Audit readiness
• Policy administration
• Control monitoring
• Regulatory compliance activities

You will work closely with IT, Security, Privacy, Compliance, Legal, and business teams to identify risks, support practical solutions, and help ensure Curana Health continues to meet security and regulatory expectations as we grow.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Healthcare Informatics, or a related field; equivalent experience will also be considered.
• 2–5 years of experience in GRC, information security, risk management, audit, compliance, cybersecurity, or a related function.
• Experience supporting risk assessments, compliance reviews, audits, control testing, or governance activities.
• Experience working in a regulated industry or compliance-driven environment.
• Knowledge of the HIPAA Security Rule.
• Understanding of information security governance, risk management, and compliance concepts.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and deadlines in a fast-paced environment.

Requirements

• Healthcare industry experience.
• Knowledge of the HIPAA Privacy Rule.
• Experience with frameworks such as HIPAA, SOC 2, NIST Cybersecurity Framework, CIS Controls, CMS, URAC, HITRUST, or ISO 27001.
• Experience with third-party risk management programs.
• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, AuditBoard, LogicGate, or similar solutions.
• Experience supporting AI governance, emerging technology risk reviews, or security governance initiatives.

Benefits

• Base salary starting at $130,000. Actual compensation will be determined based on relevant experience, qualifications, skills, education, certifications, internal equity, market considerations, and business needs.
• Competitive benefits package to eligible employees, which may include health insurance, paid time off, paid holidays, a 401(k) retirement savings plan, and additional wellness and support programs.