Security Risk and Compliance Analyst (Security Assurance)

Who We Are

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 60 health plans, including many of the top 20, and representing more than 160 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We’re constantly reimagining what’s possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

Location:
 

This role is fully remote
 

About the Opportunity:
 

At Machinify, we're building a robust security program to protect our clients' sensitive healthcare data and maintain the highest standards of information security. As part of the Security team, you will serve as a primary point of contact for customer risk assurance, helping our healthcare insurance clients understand and validate our security posture. This customer-facing role is essential to building trust with our clients and supporting our business objectives through exceptional security service delivery.
 

As a Security Risk and Compliance Analyst, you will be primarily responsible for managing customer security assurance processes, including responding to security questionnaires, audit requests, and third-party risk assessments from our healthcare payer clients. You'll work closely with cross-functional teams to ensure we consistently demonstrate our commitment to protecting sensitive healthcare data while supporting our sales and customer success teams with security expertise.
 

What you'll do:

Primary Responsibilities - Customer Risk Assurance (70% of role):

• Serve as the primary point of contact for customer security assurance requests and inquiries
• Respond to customer security questionnaires, audit requests, and compliance documentation requests with accuracy and timeliness
• Support customer-facing security presentations and calls to address client security concerns
• Collaborate with sales and customer success teams to provide security assurance during the sales process and ongoing client relationships
• Manage customer security assessment processes and coordinate responses across internal teams
• Maintain customer security documentation repository and ensure information is current and accessible

Supporting Security Program Responsibilities (30% of role):
 

• Conduct third-party risk assessments to evaluate the security posture of vendors and partners
• Create, review, and maintain security policies and procedures to align with industry best practices
• Support audit and compliance activities for SOC2 and HITRUST certifications
• Facilitate governance processes, including communication with company leadership
• Coordinate and execute periodic access reviews across systems and applications
• Track and report on security metrics and compliance status to leadership
• Support risk assessment activities and remediation tracking
• Develop and deliver security awareness training programs for employees
• Assist with security documentation for regulatory requirements
• Participate in security incident response when needed

What experience you bring (Role Requirements):
 

Essential Qualifications:
 

• Bachelor's degree in Information Security, Compliance, Risk Management, Accountin