• Assist in the execution of vulnerability and threat management initiatives under the guidance of senior team members. • Collaborate with team members to prioritize tasks and allocate resources effectively. • Participate in team meetings, contributing insights and ideas for enhancing security practices. • Utilize automated scanning tools to perform regular vulnerability scans across the Ensono infrastructure. • Aid in analyzing scan results to identify vulnerabilities, misconfigurations, and weaknesses in systems and applications. • Assist with classifying vulnerabilities based on severity levels and prioritize remediation efforts accordingly. • Work with Service Delivery Managers, System Administrators, Network Engineers, and Application Developers to understand the root causes of vulnerabilities and facilitate their remediation as required. • Contribute to the maintenance of a centralized repository for vulnerability reporting. • Assist in monitoring external threat intelligence sources for relevant information on emerging threats and vulnerabilities. • Support the analysis of incoming threat intelligence to assess its potential impact on Ensono's environment. • Aid in reviewing and refining vulnerability management processes and procedures to improve efficiency. • Assist in identifying opportunities for automation and workflow optimizations to streamline operations. • Collaborate with internal stakeholders to raise awareness of security risks and solicit support for remediation efforts. • Assist in monitoring team performance against key performance indicators (KPIs) and tracking progress on vulnerability management activities. • Seek feedback from senior team members and utilize it to continuously improve your performance and contribute effectively to the team's success.

Role Description The Global Security Systems Service Desk Analyst is a critical operational role responsible for ensuring the stability and performance of enterprise physical security systems. Acting as the central point of coordination, this role manages service requests from intake through resolution, performing advanced troubleshooting and orchestrating field response when necessary. This position requires a blend of technical expertise, analytical thinking, and service ownership. The ideal candidate is comfortable operating in a fast-paced environment, making real-time decisions, and driving issues to resolution while maintaining a high standard of customer service. Key Responsibilities - Serve as the primary point of contact for all incoming service requests related to physical security systems (via phone, email, and ticketing systems). - Perform advanced triage and root cause analysis to diagnose system issues. - Execute remote troubleshooting and resolution, minimizing the need for onsite dispatch whenever possible. - Determine incident severity and business impact; prioritize work in alignment with SLAs. - Coordinate and dispatch field technicians, ensuring proper scope, parts, and information are provided. - Own incidents end to end, including follow-ups, status updates, and final resolution validation. - Monitor system health, alerts, and dashboards to proactively identify and mitigate issues. - Collaborate with engineering, vendors, and cross-functional teams to resolve complex or recurring issues. - Identify trends and recurring problems; recommend process improvements or system enhancements. - Maintain accurate and detailed documentation in ticketing systems, including resolution steps and root cause. - Contribute to and maintain a knowledge base to improve team efficiency and first call resolution rates. - Provide guidance and informal mentoring to junior team members or technicians as needed. - Ensure compliance with security policies, data protection standards, and confidentiality requirements. Technical Scope - Enterprise Access Control Systems: Lenel OnGuard - Video Management Systems (e.g., Milestone, Lenel OnGuard) - Alarm monitoring and event management systems - Device connectivity (controllers, readers, cameras) - Basic network troubleshooting (IP addressing, connectivity, latency, device communication) - Troubleshoot integration points between security systems and IT infrastructure - Axis (or equivalent) enterprise level IP CCTV configuration, commissioning & fault finding Qualifications - 3–5 years of experience in technical support, systems analysis, or security systems service operations roles. - Experience with physical security systems (access control, CCTV) or closely related technologies. - Proven experience in incident management, triage, and issue resolution. - Strong troubleshooting skills across software, hardware, and network connected systems. - Ability to manage multiple concurrent incidents with competing priorities. - Strong written and verbal communication skills with a customer-first mindset. - Demonstrated ability to take ownership and drive issues through to completion. - Experience working with ticketing systems (e.g., APEX, Jira Service Management). Preferred Qualifications - Experience supporting enterprise scale security environments (Data Centre environments). - Familiarity with ITIL practices (incident, problem, and change management). - Experience coordinating or dispatching field service teams. - Working knowledge of networking fundamentals (TCP/IP, ports, device communication). - Experience working with vendors or third-party service providers. - Experience working with Data Centre co-location service providers. Work Environment & Additional Requirements - Will need to be highly self-motivated and comfortable working independently. - The work is often non-routine and highly complex, involving the application of advanced technical and business skills within the area of specialization. - Although predominantly supporting the EMEA region, there is an expectation to assist the wider global team in delivering a 24x7 “follow the sun” support model. - Primarily a remote role, with occasional onsite support as required. - Participation in an on-call rotation or after-hours support may be required. - Ability to work in a fast-paced, high availability environment supporting critical infrastructure. Key Performance Indicators (KPIs) - SLA adherence (response and resolution times). - First call, first contact resolution rate. - Incident backlog and aging. - Customer satisfaction (CSAT). - Accuracy and completeness of ticket documentation. Key Success Factors - Strong analytical and troubleshooting mindset. - Ability to remain composed and decisive under pressure. - Effective coordination across technical and non-technical teams. - High level of accountability and ownership. - Continuous improvement mindset with attention to detail. Benefits - Retirement plan. - Employer-provided medical and dental coverage. - Company-paid life insurance. - Voluntary life and disability insurance. - Employee assistance plan. - Securitas Saves discount program. - Paid holidays. - Paid time away from work. - Access to earned wages on a daily basis, prior to payday (restrictions and fees may apply).

• Work remotely in support of a government contract for a client located in Washington, DC. • Provide risk and vulnerability analysis. • Conduct security assessments and scanning. • Collaborate with teams to address vulnerabilities and improve security measures.

Garner’s mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role:We are looking for a Senior GRC Analyst to join our Technical Compliance team to ensure Garner’s compliance posture across security frameworks such as ISO 27001, SOC 2, HITRUST, and HIPAA. As a Senior GRC Analyst, you will run our internal audits, guide our external assessments, and partner with teams across Engineering, Product, People, and Legal so that our controls are designed well, operating effectively, and continuously improving. Our Technical Compliance team safeguards Garner’s sensitive healthcare data and protects the trust of our members, clients, and partners by maintaining a strong control environment and regulatory compliance. The work you do here has a direct impact on our ability to win and retain enterprise customers, expand into new lines of business, and scale securely as we grow. Where you will work:This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: - Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle - Serve as the subject matter expert across the company on our compliance frameworks - Serve as the primary point of contact for external auditors and assessors - Manage Garner’s Security and Privacy trust center - Maintain the risk register and drive risk identification, scoring, and reporting - Manage the maintenance of our compliance policies, standards, and procedures - Report on our compliance posture to senior leadership - Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest The ideal candidate has: - 5+ years of experience in GRC, IT audit, or information security compliance - Prior experience with HITRUST, SOC 2, and ISO 27001 audits - Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment - Proven ability to adapt your communication style across engineers, operators, and executives - A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks - Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred - A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback Technologies we use: - AWS, Okta, Datadog, Retool, Gitlab, Vanta This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Compensation Transparency:The target salary range for this position is $132,000 - $165,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com. Equal Employment Opportunity:Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.