Information Security Risk Analyst

ABOUT SOUND Headquartered in Tacoma, WA, Sound Physicians is a physician-founded and led, national, multi-specialty medical group made up of more than 1,000 business colleagues and 4,000 physicians, APPs, CRNAs, and nurses practicing in 400-plus hospitals across 45 states. Founded in 2001, and with specialties in emergency and hospital medicine, critical care, anesthesia, and telemedicine, Sound has a reputation for innovating and leading through an ever-changing healthcare landscape — with patients at the center of the universe. Sound Physicians offers a competitive benefits package inclusive of the items below, and more:

• Medical insurance, Dental insurance, and Vision insurance
• Health care and dependent care flexible spending account
• 401(k) retirement savings plan with a company match
• Paid time off (PTO) begins accruing immediately upon start date at a rate of 15 days per year, in accordance with Sound's PTO policy
• Ten company-paid holidays per year

ABOUT THE ROLE Sound Physicians is seeking an Information Security Risk Analyst to support our information systems lifecycle activities. This role involves performing assessments of systems and networks within the Sound infrastructure, cloud services, and third-party partners to identify deviations from acceptable configurations, policy, or industry standards. The role ensures compliance with regulations, policy, and contract requirements, and establishes program control processes to mitigate risks and support certification and accreditation of systems. Responsibilities include process support, analysis, coordination, security certification tests, documentation, investigations, software research, hardware introduction and release, and periodic audits. The Information Security Risk Analyst will focus on developing and strengthening current security practices and providing risk/gap remediation statistics to management to drive business decisions and realignment. The Details: This is a remote opportunity. Monday-Friday. ESSENTIAL DUTIES AND RESPONSIBILITES

• Project manage third-party risk assessments (client and self-assessments).
• Handle client security questionnaires to ensure compliance with client security requirements and address any security concerns.
• Project manage HiTrust / SOC2 initiatives and ongoing organization security certifications.
• Maintain information security policies.
• Provide risk and gap statistics to management.
• Collaborate with technical and business teams to maintain and enhance organization security.
• Support incident manager during high and critical incidents.
• Provide technical security advice.
• Provide policy recommendations.

VALUES

• Analytical mindset: Ability to interpret and communicate complex compensation data effectively.
• Proactive problem-solving: Demonstrates ownership of work, identifies opportunities for improvement, and drives solutions.
• Strong collaboration: Works well across Finance, HR, and Clinical Operations to build consensus on compensation strategies.
• Attention to detail: Ensures accuracy and compliance in all compensation processes and data analysis.
• Growth-oriented: Keeps up with industry trends and continuously seeks ways to enhance compensation strategies.

KNOWLEDGE, SKILLS, AND ABILITIES

• Experience with Microsoft Windows platforms
• Experience in system analysis
• Experience in system auditing
• Knowledge of healthcare industry frameworks and regulations, e.g. HIPAA and HITRUST.
• Knowledge of international information security frameworks and standards, e.g. NIST, ISO

EDUCATION AND EXPERIENCE

• Minimum: Associates’ Degree in a relevant field is required.
• Preferred: Bachelor’s degree in relevant field and/or CRISC is preferred.
• Minimum: Three years experience in relevant field.
• Preferred: Five to eight years experience in relevant field.

SALARY RANGE

• This position offers an annual salary range of $85,000 - $110,000. The starting salary will fall between $85,000-$90,000, taking into account the candidate’s experience, education and location.

Sound Physicians is an Equal Employment Opportunity (EEO) employer and is committed to diversity, equity, and inclusion at the bedside and in our workforce. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, gender identity, sexual orientation, age, marital status, veteran status, disability status, or any other characteristic protected by federal, state, or local laws. This job description reflects the present requirements of the position. As duties and responsibilities change and develop, the job description will be reviewed and subject to amendment. Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor. Apply tot his job Apply To this Job