Find More Than 10K+
United Kingdom Jobs

Security Compliance Analyst OR Security Compliance and Risk Analyst

U.S. Citizenship is required for this position due to Department of Defense restrictions

Who We Are

WPS Health Solutions is a leading not-for-profit health insurer in Wisconsin. Our services offer health insurance plans for individuals, families, seniors, and group plans for small to large businesses. We process claims and provide customer service support for beneficiaries of the Medicare program and manage benefits for millions of active-duty and retired military personnel across the U.S. and abroad. In 2021, WPS Health Solutions celebrated 75 years of making health insurance easier for those we serve. Proud to be military and veteran ready.

Our Culture

WPS’ Performance-Based Culture is where the great work and innovations of our people are seen, fueled, and rewarded. We accomplish this by creating an inclusive, empowering employee experience, focusing on People, Work, and Conditions. This results in people bringing their authentic selves to work every day in an organization that successfully adapts to business changes and new opportunities. We are guided by our Purpose: Together, making health care easier for the people we serve.

From 2021 - 2023 WPS Health Solutions has been recognized for several awards including:

• Madison, Wisconsin’s Top Workplaces
• USA Top Workplaces and the cultural excellence awards for Remote Work and Work-Life Flexibility
• Achievers 50 Most Engaged Workplaces® with the further honor of Achievers “Elite 8” winner in the category of Culture Alignment
• DAV Patriot Employer
• VETS Indexes 4 Star Employer

Role Snapshot
We have 2 opening as a Compliance Analyst our first position will focus on generalized IT Security, Audit and Compliance. The second role will focus on IT Security, Audit and Compliance AND will have dedicated Risk Analyst responsibilities.

Our compliance Analysts will provide direct support to the WPS security compliance team by assuring information system processes and procedures meet or exceed our contractual security compliance requirements, including but not limited to; Medicare, HIPAA and NIST Cyber Security Framework. Manage small to medium projects with a moderate level of complexity.

As a Security Compliance Analyst you will:

• Coordinate the gathering and review of information for internal and external audits from IT and Security teams.
• Coordinate the gathering and review of evidence for Plan of Actions & Milestones (POA&Ms) for non-compliant controls and audit findings.
• Work with IT and Security Subject Matter Experts to review and attest to compliance with required Security Controls and/or applicable policies for IT systems. e.g. NIST publications, OMB guidance, HIPAA, DFARS and MAC ARS.
• Maintain responsibility for completion and accuracy of work products.
• Identify opportunities for efficiencies in work process and innovative approaches to completing scope of work.
• Continuously update departmental documentation as required.
• Collaborate with System Security Officers on audits, findings, and related controls. e.g. NIST publications, OMB guidance, HIPAA, DFARS and MAC ARS.
• Act as a cyber security compliance ambassador.
• Act as a cyber security compliance liaison consulting with technical subject matter experts from diverse areas.
• Participate in team problem solving efforts and offer ideas to solve compliance issues.

In addition: As a Security Compliance AND Risk Analyst you will:

• Lead vendor risk management process for IT Security.
• Work closely with Procurement, Legal, IT Security, and IT Subject Mater Experts to assess risk and compliance of vendors, business partners, and other third parties that WPS does business with.
• Take part in other IT risk management duties such as Risk Identification and Risk Assessments.
• Work on risk related activities about 50% of the time.

How do I know this opportunity is right for me? If you:

• Possess excellent verbal and written communication skills and are able to navigate in an environment with both highly technical and highly non-technical individuals.
• Have passion for technology, security and innovation.
• Want to work with a fast-paced project team focused on compliance.
• Are driven to utilize your technical security expertise to increase the security posture at WPS.
• Like to work on multiple concurrent projects with high degrees of impact and visibility to the business.
• Have experience working in a highly regulated environment and have an understanding of audit preparedness/remediation and compliance requirements.

What will I gain from this role?

• Working in a highly complex highly security conscious environment with a security umbrella that encompasses Health Insurance, contracts with Center for Medicare and Medicaid Service (CMS) and Department of Defense (DOD) that include, Tricare and VA.
• Being a security thought leader, sharing innovative ideas, learning about cutting edge security frameworks, systems, tools and processes.
• Experience working in an environment that serves our Nation’s military, veterans, Guard and Reserves and Medicare beneficiaries.
• Experience working in a continuous performance feedback environment.

Minimum Qualifications

• U.S. Citizenship is required for this position due to Department of Defense restrictions.
• Bachelor’s degree in Information Technology, or related field OR equivalent post high school education and/or work-related experience.

Preferred Qualifications

• 2+ years of experience in IT Security, Audit, or Compliance.
• Healthcare industry experience.
• Government contractor experience.
• A Comprehensive understanding of:
  • HIPAA Privacy Rule
  • NIST Cyber Security Framework
• Risk Analyst Role:
  • Risk Management
  • Risk Identification
  • Risk Assessment
  • Vendor Risk (3rd Party Risk Assessments)

Salary Range

$70,000 to $82,000

The base pay offered for this position may vary within the posted range based on your job-related knowledge, skills, experience and may fall outside the posted range.

Work Location

This role is open to remote work for this opportunity in the following approved states:
Arizona, Colorado, Connecticut, Florida, Georgia, Illinois, Indiana, Iowa, Michigan, Minnesota, Missouri, Nebraska, Nevada, New Jersey, North Carolina, North Dakota, Ohio, South Carolina, South Dakota, Texas, Virginia, Wisconsin

Remote Worker Requirements

For remote position, employee is required to meet remote worker requirements, including a designated work station, a wired (Ethernet) connection to the network, and a minimum of 10Mbps downstream connection with at least 1Mbps upstream (can be checked at https://speedtest.net)

Benefits

• Remote work is encouraged but hybrid work options are available
• Performance bonus and/or merit increase opportunities
• 401(k) with dollar-per-dollar match up to 6% of salary (100% vested immediately)
• Competitive paid time off
• Health, dental insurance, Teladoc starts DAY 1
• Review additional benefits here

Sign up for Job Alerts

FOLLOW US!

LinkedIn

Facebook

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)