Role Description We're seeking a Senior Information Security Analyst to join our team and play a key role in protecting our information assets, strengthening our security posture, and helping the organization stay ahead of evolving cyber threats. This individual will partner across the business to identify risks, enhance security controls, and support a secure, scalable environment as we continue to grow. This is a fully remote opportunity to do meaningful work as part of a collaborative, people-first culture. At Relatient, we are passionate about making a difference in healthcare by helping organizations better connect with patients and improve outcomes. How You’ll Make an Impact: - Act as primary contact for SOC II Audit, Security Risk Assessment, and Penetration Testing. - Create and maintain security policies and standards to meet HITRUST, HIPAA and SOC II requirements. - Manage, maintain, and review security policy, documentation, and auditing. - Manage the process of submitting customers’ security information and audit questionnaires. - Serves as a part of the Networks Operation team for technology and security support. - Educates staff on security requirements and best practices. - Collaborates with leadership on the development of security policies. - Works with staff, business partners, and leadership to help them understand potential application security risks and mitigation. - Stays connected with industry best practices and vendor-specific application methodologies. Qualifications - Bachelor’s degree in computer science or related field or equivalent work experience in lieu of a degree is required. - 8+ years of information security, cybersecurity, or IT experience required. - 3+ years in a senior security engineering or analyst role preferred. - CISSP, CISM, GIAC, or equivalent security certification strongly preferred. - Experience in HIPAA, SOC II, and NIST controls. - Direct experience with anti-virus software, intrusion detection, firewalls, and content filtering. - Knowledge of risk assessment tools, technologies, and methods. - Experience designing secure networks, systems, and application architectures. - Knowledge of disaster recovery, computer forensic tools, technologies, and methodology. - Experience planning, researching, and developing security policies, standards and procedures. - Professional experience in a system administration role supporting multiple platforms and applications. - Ability to communicate network security issues to peers and management. - Ability to read and use the results of mobile code, malicious code, and anti-virus software. Mindsets That Matter: - Act with purpose, focus, and accountability. - Collaborate across teams and communicate clearly. - Keep innovating and automate what slows you down. Travel Requirements: - Traveling up to 5% may be required. Pay & Perks: - The salary range for this role is $95,000- $135,000. - Final compensation depends on experience, skills, and location. Benefits - Medical, dental, and vision coverage. - Company-paid life and disability insurance. - HSA with employer contributions. - Employee Assistance Program (EAP). - 401(k) with company match. - Unlimited PTO, 10 paid holidays, and paid parental leave. Equal Opportunity at Relatient: We’re building a team as diverse as the communities we serve. Relatient is proud to be an equal opportunity employer. If you need accommodation during the application process, just let us know. Ready to Join Relatient? If you’re looking for work that matters and a team that makes it count, we'd love to hear from you! To join our team, you must live in one of the following states where we’re authorized to hire: Alabama, Arkansas, Florida, Georgia, Indiana, Kentucky, Missouri, New Jersey, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, and Texas.

Role Description We are hiring a Sr. Information Security Governance, Risk, and Compliance (GRC) Analyst at BlueCross BlueShield of Tennessee! In this role, you will help strengthen and mature BCBST’s information security governance program by leading risk management, compliance, and assurance initiatives across the enterprise. - Serve as a key contributor in developing and maintaining Systems Security Plans (SSPs). - Partner with technology and business stakeholders to support audit readiness efforts. - Manage security controls, assess risk, and ensure alignment with industry frameworks and regulatory requirements. - Protect organizational assets while helping BCBST maintain a strong security and compliance posture. To be successful in this role, you'll bring strong cybersecurity knowledge, exceptional technical writing skills, and experience translating complex security requirements into clear, actionable documentation. - Experience developing Systems Security Plans (SSPs). - Supporting audit and compliance activities. - Working with security frameworks and control management programs. - Collaborating across technical teams to manage risk. Professional certifications such as CISA, CISM, or CISSP are highly preferred. Note: This is a remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office. Candidates must be able to work Eastern Time Zone business hours. Participation in an on-call rotation is required for approximately two weeks every 30 weeks. Sponsorship is not available for this role. Qualifications - Bachelor’s degree in a relevant field or an equivalent of four years of experience is required. - 5 years of professional experience in Information Security or related IT roles with security-related responsibilities, including at least 2 years focused on Governance, Risk, and Compliance (GRC) functions. - Experience leveraging AI-enabled tools to automate and enhance GRC processes preferred. Requirements - Preferred certifications: CISSP, CRISC, CISA, or CISM. - Ability to assess and document organizational risks, including identifying impacts and recommending mitigation strategies. - Ability to interpret and apply regulatory requirements and industry frameworks (e.g., NIST, SOC 2, HIPAA) to organizational controls. - Ability to analyze security, compliance, and risk metrics to identify trends and drive continuous improvement. - Ability to communicate complex risk and compliance concepts clearly to both technical and non-technical stakeholders. - Ability to collaborate effectively across cross-functional teams to integrate governance, risk, and compliance practices into business processes. - Exceptional time management skills. - Excellent oral and written communication skills. - Strong interpersonal skills and ability to cultivate relationships with internal and external stakeholders. - Ability to work with all levels of staff and management. Company Description

• Conduct comprehensive security assessments to identify potential vulnerabilities in our Azure systems, networks, and applications. • Use Endpoint Device Management (EDM) solutions to remediate identified vulnerabilities through automated patch deployment. • Collaborate with engineering teams to address vulnerabilities that fall outside the scope of automated patching. • Utilize industry standard tools and methodologies to perform assessments and identify security gaps. • Execute regular vulnerability scans to uncover security weaknesses and ensure compliance with security policies, and regulations. • Analyze scan results, prioritize vulnerabilities based on risk, and recommend corrective actions. • Monitor and review Indicators of Compromise (IOC) to detect and respond to potential security incidents. • Analyze threat intelligence and perform investigations to prevent or mitigate security breaches. • Collaborate with internal teams and external partners to contain and resolve security threats promptly. • Perform routine review of alerts and security logs to identify anomalous activity, escalate confirmed incidents, and maintain documentation of findings. • Conduct and document periodic user access reviews across systems and applications to support least-privilege controls and satisfy audit requirements. • Assist in responding to customer and prospect security questionnaires, including DDQs and vendor risk assessments, by accurately documenting Lakeside’s controls, certifications, and security practices in alignment with our security program and approved disclosure posture. • Performing special projects as required

• As a Security Analyst on our team, you’ll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and other system stakeholders to coordinate and drive the completion of Risk Management Framework (RMF) steps 0-6 ATO activities and requirements, identify and mitigate risks, escalate project risks to leadership, understand and apply VA authorization policies and processes, and provide information system security expertise. • You'll ensure the appropriate operational security posture is maintained for information systems throughout the system’s lifecycle from product acquisition and installation through decommission. • You will complete and maintain very detailed security documentation and coordinate to execute ATO support duties that document security details related to system installations, a variety of IT systems, networks, hardware, and software in a variety of complex and simple installation sites. • You’ll work with your client to translate security concepts into actionable, implementable solution recommendations to help the client make informed security decisions from all aspects of IT deployments ensuring full commissioning is completed through deployment into production and decommissioning. • This is your opportunity to act as an information security and RMF subject matter expert while broadening your skills in cybersecurity.