IT / Security Operations Analyst

Transform healthcare with us. At Qualified Health, we’re redefining what’s possible with Generative AI in healthcare. Our infrastructure provides the guardrails for safe AI governance, healthcare-specific agent creation, and real-time algorithm monitoring—working alongside leading health systems to drive real change. This is more than just a job. It’s an opportunity to build the future of AI in healthcare, solve complex challenges, and make a lasting impact on patient care. If you’re ambitious, innovative, and ready to move fast, we’d love to have you on board. Join us in shaping the future of healthcare. Job Summary: The IT / Security Operations Analyst owns the operational engine of security, compliance, and IT at Qualified Health. You're the person who keeps the day-to-day running: vendor intakes, IAM administration, device management, IT vendor coordination, compliance evidence collection, and the security questionnaires that our health system partners send us as part of their due diligence. This is a foundational role in a rapidly growing company. We handle protected health information for 15+ major health systems, and the security operational work is real, growing, and critically important. Today, some of it is being absorbed by our data integration team — people who should be deploying AI workflows, not resetting passwords and reviewing vendor SOC 2 reports. You'll take that operational burden off their plate and give it the dedicated attention it deserves. You'll work alongside the Director of Security Compliance and a security engineer, forming a team that owns the company's entire security and IT operations posture. Key Responsibilities: Manage vendor security intakes and assessments — evaluating new vendors against our security requirements and maintaining the vendor inventory Administer IAM (identity and access management) across company systems — user provisioning, access reviews, role management Manage device enrollment, MDM policies, and endpoint compliance Coordinate with our outsourced IT support vendor for employee onboarding/offboarding and support escalations Support ongoing HITRUST compliance maintenance and evidence collection Complete client security questionnaire responses — lifting this from the integration team Maintain security documentation, policies, and procedures Support security scan report preparation and remediation tracking Required Qualifications: 3-5 years in IT operations, security operations, or GRC roles Experience with IAM platforms (Okta, Azure AD/Entra, or similar) Familiarity with MDM solutions and endpoint management Understanding of compliance frameworks (HITRUST, SOC 2, HIPAA) Bachelor's degree in Information Technology, Cybersecurity, Computer Science or a related field Desirable Skills: Vendor management experience — assessing third-party security posture and managing remediation Healthcare industry experience — understanding of HIPAA requirements and health system security expectations Experience with compliance automation tools (Vanta, Drata, or similar) Background managing outsourced IT support relationships Experience at a fast-growing startup where operational processes were being built alongside daily execution Organizational Mastery: You manage dozens of concurrent operational tasks — vendor reviews, access requests, device enrollments, questionnaire responses — without dropping any of them Documentation Rigor: You keep processes documented, evidence organized, and compliance records audit-ready at all times Responsiveness: When someone needs access provisioned, a vendor reviewed, or a security questionnaire completed, you handle it promptly and accurately Process Improvement: You don't just run the operational playbook — you improve it. You look for ways to automate, streamline, and reduce manual effort Discretion: You handle sensitive information (access credentials, security findings, vendor assessments) with the appropriate level ... (truncated, view full listing at source)