Security Analyst (GRC)

About the role

At Machinify, we're building a robust security program to protect our clients' sensitive healthcare data and maintain the highest standards of information security. As part of the Security team, you will play a central role in managing our security assurance operations - helping ensure that customer requests, audit activities, and compliance processes run smoothly and efficiently. This is an entry-level role suited for someone detail-oriented, hardworking, and intellectually curious. A background in cybersecurity is helpful but not required. We'll consider candidates with experience in business operations, finance, accounting, or related fields who demonstrate strong organizational instincts and a commitment to doing things right.

Responsibilities

• Security Assurance Operations (60% of role)
• Own the intake process for security assurance requests: review incoming tickets, triage and prioritize work, assign tasks to the appropriate team members, and track requests to resolution
• Resolve routine and straightforward security inquiries and questionnaire items independently
• Communicate clearly with internal stakeholders and customers throughout the assurance process, setting expectations and providing status updates
• Respond to customer security questionnaires and audit requests with accuracy and timeliness, escalating complex items as appropriate
• Maintain the security documentation repository and ensure materials are current and accessible
• Support customer-facing security calls and presentations alongside senior team members
• Audit and Compliance Support (25% of role)
• Assist with HITRUST r2 and SOC 2 audit preparation and evidence collection
• Help coordinate audit activities across internal teams, tracking open items and deadlines
• Support access review processes and other recurring compliance activities
• Assist with security policy and procedure maintenance
• General Security Program Support (15% of role)
• Track and report on security metrics and assurance request status
• Support vendor risk assessment activities
• Assist with security awareness efforts and documentation as needed
• Participate in security incident response when needed
• What You Bring
• Essential Qualifications
• Bachelor's degree in Information Security, Business, Operations, Finance, Accounting, or a related field, or equivalent work experience
• Strong attention to detail and follow-through - you catch things others miss and see tasks through to completion
• Excellent written and verbal communication skills, including comfort communicating with external clients
• Ability to manage multiple concurrent requests and prioritize effectively in a fast-paced environment
• Strong problem-solving orientation; you approach unfamiliar situations with curiosity and good judgment
• Proficiency with productivity and work-tracking tools (ticketing systems, spreadsheets, document management)

Requirements

• 1-2 years of experience in operations, compliance, audit support, finance, or a related field
• Exposure to information security concepts, frameworks (NIST, HITRUST, SOC 2), or HIPAA compliance
• Experience in healthcare, healthcare technology, or working with regulated data environments
• Familiarity with GRC or security assurance workflows

Benefits

Additional Information

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 85 health plans, including many of the top 20, and representing more than 270 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We're constantly reimagining what's possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at machinifyinc? Share your experience