Security Analyst

Ventra is a leading business solutions provider for facility-based physicians practicing anesthesia, emergency medicine, hospital medicine, pathology, and radiology. Focused on Revenue Cycle Management, Ventra partners with private practices, hospitals, health systems, and ambulatory surgery centers to deliver transparent and data-driven solutions that solve the most complex revenue and reimbursement issues, enabling clinicians to focus on providing outstanding care to their patients and communities.

Come Join Our Team!

• As part of our robust Rewards & Recognition program, this role is eligible for our Ventra performance-based incentive plan, because we believe great work deserves great rewards

Help Us Grow Our Dream Team — Join Us, Refer a Friend, and Earn a Referral Bonus!

• The Security Analyst Experienced will be responsible for supporting the organization's Information Security and Information Security Management System (ISMS). The role combines hands-on information security activities with internal ISMS auditing, risk management, compliance, and continual improvement in alignment with ISO/IEC 27001 requirements.

• Conduct internal ISMS and ISO 27001 audits and assess the effectiveness of security controls.
• Review information security policies, procedures, standards, and control evidence.
• Identify and document security risks, control gaps, observations, and non-conformities.
• Perform information security risk assessments and support maintenance of the ISMS risk register.
• Track audit findings and corrective actions and validate remediation evidence through closure.
• Support ISO 27001 certification, surveillance audits, and management reviews.
• Monitor security systems, networks, endpoints, and infrastructure for threats and suspicious activity.
• Support security incident identification, investigation, response, and documentation.
• Coordinate vulnerability management, patch management, and remediation activities.
• Support access management, privileged access, and periodic user access reviews.
• Configure, troubleshoot, and maintain security tools and infrastructure, including firewalls, endpoint security, authentication, and monitoring solutions.
• Support security logging, alerting, and investigation activities.
• Assist with data protection, information classification, and secure handling of sensitive information.
• Participate in third-party/vendor security assessments where required.
• Support business continuity and disaster recovery security requirements.
• Identify security requirements and recommend solutions to improve the organization's security posture.
• Develop and implement security improvements and automation for repeatable security tasks.
• Support security awareness and training initiatives.
• Prepare security, audit, risk, and compliance reports for management.
• Ensure compliance with organizational security policies and applicable information security standards.
• Contribute to the continual improvement of the organization's ISMS and overall security posture.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred.
• Minimum 2 years of experience in Information Security, ISMS, IT Audit, IT Compliance, GRC, or a related security role.

• Good practical understanding of ISO/IEC 27001, information security controls, risk management, and internal auditing.
• Working knowledge of security technologies such as firewalls, endpoint security, authentication, network security, vulnerability management, and security monitoring.
• Strong analytical, problem-solving, documentation, and communication skills.
• Strong attention to detail and ability to work with both technical and business teams.

• Base Compensation will be based on various factors unique to each candidate including geographic location, skill set, experience, qualifications, and other job-related reasons. 

• This position is also eligible for a discretionary incentive bonus in accordance with company policies. 

Equal Employment Opportunity (Applicable only in the US)
Ventra Health is an equal opportunity employer committed to fostering a culturally diverse organization. We strive for inclusiveness and a workplace where mutual respect is paramount. We encourage applications from a diverse pool of candidates, and all qualified applicants will receive consideration for employment without regard to race, color, ethnicity, religion, sex, age, national origin, disability, sexual orientation, gender identity and expression, or veteran status. We will provide reasonable accommodations to qualified individuals with disabilities, as needed, to assist them in performing essential job functions.
 
Recruitment Agencies
Ventra Health does not accept unsolicited agency resumes. Ventra Health is not responsible for any fees related to unsolicited resumes.
 
Solicitation of Payment
Ventra Health does not solicit payment from our applicants and candidates for consideration or placement.

Attention Candidates
Please be aware that there have been reports of individuals falsely claiming to represent Ventra Health or one of our affiliated entities Ventra Health Private Limited and Ventra Health Global Services. These scammers may attempt to conduct fake interviews, solicit personal information, and, in some cases, have sent fraudulent offer letters.
To protect yourself, verify any communication you receive by contacting us directly through our official channels. If you have any doubts, please contact us at Careers@VentraHealth.com to confirm the legitimacy of the offer and the person who contacted you. All legitimate roles are posted on https://ventrahealth.com/careers/. 

Statement of Accessibility
Ventra Health is committed to making our digital experiences accessible to all users, regardless of ability or assistive technology preferences. We continually work to enhance the user experience through ongoing improvements and adherence to accessibility standards. Please review at https://ventrahealth.com/statement-of-accessibility/.