
Information Security Analyst
Evio
full-time
Posted on:
Location Type: Remote
Location: United States
Visit company websiteExplore more
Salary
💰 $100,000 - $115,000 per year
Tech Stack
About the role
- Own and execute user access management, including provisioning and deprovisioning across AWS, O365, HRIS, SaaS platforms, and databases).
- Implement and maintain least-privilege RBAC, access control matrices, and entitlement catalogs.
- Administer identity and access systems, including IdP/SSO integrations (SAML, OAuth) and SCIM provisioning.
- Enforce privileged access management (PAM), multi-factor authentication (MFA), separation of duties, and key/secret rotation.
- Conduct recurring access reviews (quarterly and annual) across systems.
- Maintain provisioning workflows and track SLA performance for onboarding/offboarding.
- Monitor, triage, and investigate security alerts.
- Support incident response activities.
- Perform audit trail and log reviews (SIEM, CloudTrail, O365 logs) and track remediation.
- Support SOC 2, HIPAA, and HITRUST audits, including evidence collection and remediation tracking.
- Maintain and update security policies, standards, and procedures.
Requirements
- 3+ years of experience in information security, risk, or compliance.
- Experience in regulated environments (health care preferred).
- Familiarity with frameworks such as HIPAA, SOC 2, HITRUST, or NIST.
- Experience with cloud and SaaS security environments (AWS, O365).
- Strong analytical skills and the ability to clearly communicate risk.
- Relevant certifications (Security+, CISSP, CISM, CISA) are a plus.
- Excitement for continuing to mature and strengthen an established security program.
- Someone who takes initiative, unearthing problems and leading with solutions.
- Bring energy and creativity to inspire adoption of cybersecurity best practices
Benefits
- Great Health Insurance
- 401K Match
- Time Off
- Parental Leave
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
user access managementRBACaccess control matricesentitlement catalogsIdP/SSO integrationsSAMLOAuthSCIM provisioningprivileged access managementmulti-factor authentication
Soft Skills
analytical skillscommunicationinitiativeproblem-solvingleadershipcreativityenergyinspiration
Certifications
Security+CISSPCISMCISA