IT Security & HIPAA Compliance Specialist

Company Description Fortius Tech Solutions is an IT services company that has been delivering comprehensive web solutions since 2007. The organization focuses on understanding each client’s business requirements and providing dependable, tailored technology services. Fortius offers a range of web services, from custom website design to complex web application development. Multidisciplinary experts from different domains collaborate to combine business knowledge with technical competence and proven methodologies. This approach enables Fortius to deliver high-quality, cost-effective results that help clients maximize competitive advantage and productivity.
Role Description We are looking for an experienced IT Security & HIPAA Compliance Specialist to manage and strengthen the day-to-day security, administration, and compliance of our technology environment for one of our client - Telehealth/Healthcare organization.
The ideal candidate will have hands-on experience managing Google Workspace (GWS), Slack, user access, security controls, data protection, and HIPAA compliance requirements. The person will be responsible for ensuring that our collaboration platforms and IT environment are appropriately configured, monitored, and maintained to protect sensitive company information and Protected Health Information (PHI).
This is a hands-on role requiring a combination of SaaS administration, information security, access management, compliance monitoring, documentation, and incident response.
Experience working within Healthcare, Telehealth, HealthTech, or another regulated environment will be highly preferred.
Qualifications
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, or a related discipline, or equivalent relevant professional experience.
Approximately 1-3 years of experience in IT administration, information security, SaaS security, compliance, or related roles.
Hands-on administrative experience with Google Workspace.
Hands-on experience administering or securing Slack in a business environment.
Good understanding of HIPAA Security and Privacy requirements, particularly as they relate to electronic PHI.
Experience with Identity and Access Management (IAM), MFA, RBAC, least-privilege access, user lifecycle management, and access reviews.
Understanding of email security, phishing prevention, endpoint security, device management, and data protection.
Experience reviewing security logs, alerts, user activities, and suspicious events.
Good understanding of SaaS security and third-party application/integration risks.
Ability to prepare and maintain security policies, procedures, evidence, and compliance documentation.
Preferred Experience
Candidates with the following experience will be strongly preferred:
· Previous experience with a Telehealth, Healthcare, HealthTech, Healthcare SaaS, or HIPAA-regulated organization.
· Experience administering Google Workspace in an environment handling PHI/ePHI.
· Experience with Slack security and compliance controls in a regulated organization.
· Experience with Google Workspace DLP, security investigation/audit capabilities, endpoint management, or similar security controls.
· Experience with MDM/endpoint security platforms.
· Experience supporting HIPAA audits, security risk assessments, SOC 2, HITRUST, ISO 27001, or similar compliance/security frameworks.
· Experience participating in security incident response.
· Experience conducting user access reviews and SaaS security assessments.
Professional Skills
· Strong attention to detail and security-conscious mindset.
· Ability to identify security and compliance risks proactively.
· Strong troubleshooting and analytical skills.
· Ability to work independently and take ownership of day-to-day security and compliance activities.
· Good written and verbal communication skills.
· Ability to communicate security risks clearly to both technical and non-technical stakeholders.
· Strong documentation and record-keeping skills.
· Ability to handle confidential and sensitive information responsibly.

Work arrangement
No