Healthcare IT Compliance Analyst

Responsibilities
Run a HIPAA risk assessment on the app: where patient data is collected, stored and sent, and who can see it.
Turn the Security Rule safeguards into a requirements checklist for the developer: access controls, unique user IDs, encryption at rest and in transit, audit logs, automatic logoff, backup and recovery.
Check that each vendor (hosting, email, SMS, analytics) is HIPAA-eligible and will sign a business associate agreement (BAA).
Write the policies and procedures: access, incident response, breach notification, data retention, workforce training.
Keep a compliance record for audits: risk register, safeguard matrix, evidence log.
Review each release against the checklist before it goes live.
Requirements
3+ years in healthcare IT compliance or health-tech, with hands-on Security Rule work.
Working knowledge of cloud setups that meet HIPAA (AWS, Azure or GCP).
Has written risk assessments and policies before.
Nice to have: CHPS, CHPC, CIPP/US or HCISPP certification.
US Shift
Salary - 30-32k

Work arrangement
Yes