Security Lead Analyst

Responsibilities:
Lead and manage security programs such as SOC 2 Type II and HITRUST.
Design and improve security controls across AWS, GCP, or Azure cloud environments.
Assess and mitigate security risks for applications, infrastructure, and AI/LLM-based systems.
Drive security architecture reviews and provide risk-based recommendations to leadership.
Build and maintain security processes for cloud-native products.
Evaluate and manage external security vendors, consultants, and security assessments.
Partner with Engineering and Product teams to embed security into the software development lifecycle.
Monitor security posture, respond to vulnerabilities, and ensure continuous compliance.
Present security risks, business impact, and remediation plans to technical and non-technical stakeholders.
Requirements:
7+ years of experience in Information Security or Cyber Security.
3+ years of experience in regulated environments (Healthcare, Finance, or Government).
Hands-on ownership of SOC 2 Type II or HITRUST compliance programs.
Strong experience securing cloud platforms (AWS, GCP, or Azure).
Experience in security risk assessment, governance, and compliance.
Hands-on experience securing AI/LLM applications or defining AI security controls.
Experience managing external security vendors and third-party security assessments.
Strong stakeholder management, communication, and decision-making skills.
Recent hands-on technical security experience as an Individual Contributor.

Experience
7-11 yrs