Zus Health

InfoSec Compliance Analyst

United States

Hybrid

Full Time

#Technology

#SOC 2

#Risk Management

#SIEM

#AWS

#DevOps

#GitHub

#Jira

#GSuite

Zus Health is looking for a InfoSec Compliance Analyst

Full Time Mid-Level Hybrid United States Technology SOC 2 Risk Management SIEM AWS DevOps GitHub Jira GSuite English 401k Medical insurance Wellness programs Unlimited vacation Equity compensation Hybrid work

Who we are

Zus is a shared health data platform designed to accelerate healthcare data interoperability by providing easy-to-use patient data via API, embedded components, and direct EHR integrations. Founded in 2021 by Jonathan Bush, co-founder and former CEO of athenahealth, Zus partners with HIEs and other data networks to aggregate patient clinical history and then translates that history into user-friendly information at the point of care. Zus's mission is to catalyze healthcare's greatest inventors by maximizing the value of patient insights - so that they can build up, not around.

What we’re looking for

We are looking for an InfoSec Compliance Analyst to support and mature our InfoSec and Compliance programs. This role is perfect for someone who is process-driven, organized, and curious — with an eye for documentation, systems, and continuous improvement. You’ll be a critical partner in maintaining and enhancing our security practices, with opportunities to grow deeper into the Risk and InfoSec management space (e.g., AWS, DevOps, and security infrastructure) over time.

You’ll report to our Manager of InfoSec and collaborate cross-functionally with IT, Engineering, Legal, People Ops, and other teams to keep our security, privacy, and compliance programs running smoothly and effectively

As part of our team, you will be responsible for

Risk and Compliance Management

Maintaining and monitoring SOC 2 controls, tests, and evidence. Assisting with coordination of any required remediation or documentation generation.

Proactively identifying, raising, and documenting risks as part of our ongoing Risk Management program.

Performing access reviews across Zus Identity-Provider (Okta), customer environments, SaaS tools, and Google Workspace.

Operational Security Stewardship

Performing the security review aspect of new software acquisition or purchase request within Zus

Managing Vendor Review and Third-Party Risk Management (TPRM) workflows.

Leading the configuration, maintenance, and reporting for security awareness and anti-phishing campaigns.

InfoSec Planning and Program Coordination

Operating the master InfoSec program schedule, ensuring all annual and quarterly security activities are completed on time, documented thoroughly, and the compliance artifacts are generated and securely stored..

Planning, coordinating, and publishing materials for scheduled activities such as postmortems, incident debriefs, and tabletop exercises.

Driving annual compliance activities, such as Disaster Recovery tests, Incident Response tests, Network reviews, Penetration tests, Risk Assessments, and Customer SSO credential rotations.

Coordinating quarterly compliance reviews in partnership with Legal and other stakeholders.

Process Improvement

Helping prioritize and track incident postmortem follow-up actions.

Contribute to implementation work related to configuration-as-code and GitOps workflows.

Maintain hygiene (related to sensitive customer data, PHI) in shared environments (e.g., Google Drive monitoring and cleanup).

You're a good fit because you have

Organized, detail-oriented, and accountable — you take pride in running a tight ship.

Strong project and documentation skills; you can wrangle chaos into a crisp Confluence page and clearly defined Jira tickets.

Familiarity with SIEM tools.

Fast and effective: you know how to move things forward without overcomplicating them.

A self-starter attitude that shows that you are ready for the fast, and sometimes unstructured nature of an early startup.

It would be great if you had

Interest in growing into AWS, DevOps, and Security infrastructure concepts — you don’t need to be a developer, but you’re curious and eager to learn.

Previous experience supporting SOC 2 audits or other security frameworks (HIPAA, ISO 27001, HITRUST, etc.).

Exposure to tools like GitHub, Jira, GSuite Admin, TrustCloud, or AWS IAM is a plus.

Basic knowledge of infrastructure-as-code and configuration-as-code as well as CI/CD processes.

CISA certification.

This role is based in Boston with a hybrid schedule where you'll be expected to work in the office a few days per week. We're located at 1 Lincoln St.

We will offer you…

• Competitive compensation that reflects the value you bring to the team a combination of cash and equity

• Robust benefits that include health insurance, wellness benefits, 401k with a match, unlimited PTO

• Opportunity to work alongside a passionate team that is determined to help change the world (and have fun doing it)

Please Note: Research shows that candidates from underrepresented backgrounds often don’t apply unless they meet 100% of the job criteria. While we have worked to consolidate the minimum qualifications for each role, we aren’t looking for someone who checks each box on a page; we’re looking for active learners and people who care about disrupting the current healthcare system with their unique experiences.

We do not conduct interviews by text nor will we send you a job offer unless you've interviewed with multiple people, including the Director of People & Talent, over video interviews. Job scams do exist so please be careful with your personal information.

Zus Health

6 views

0 applied

Company Size

51-100

Markets

Information Technology

Medical

Social Media

Visit Zus Health

Share this job

Copy Permalink

Open roles at Zus Health

Zus Health

Machine Learning Engineer

Remote

Full Time

#Engineering

#Machine Learning

#Large Language Models

#MLOps

#Python

#TensorFlow

#PyTorch

#scikit learn

#Cloud Services

#Distributed Computing

Zus Health

Senior Engineer, Data Acquisition

United States

Hybrid

Full Time

#Engineering

#Data Pipelines

#AWS Services

#Go

#NodeJS

#RESTful Services

Zus Health

Demand Generation Manager

Remote

Full Time

#Marketing

#Account Based Marketing

#CRM

#Marketing Analytics

#Lead Scoring

#SEO Strategies

Zus Health

Product Manager

Remote

Full Time

#Product

#Product Management

#Management

#Data Reporting

#SQL

#RESTful APIs

Zus Health

Senior Manager, Data Engineering

United States

Hybrid

Full Time

#Engineering

#Data Integration

#Go

#Snowflake

#DynamoDB

#AWS

Zus Health

Principal Machine Learning Engineer

United States

On-site

Full Time

#Engineering

#Healthcare

#Machine Learning

#Python

#Java

#Go

#TensorFlow

#PyTorch

#scikit learn

#MLOps

#AWS

#GCP

#Azure

Discover similar jobs

Lumina

Software Engineer

Remote

Full Time

#Technology

#Web

#Scripting

#AI

#Infrastructure

GameChanger

Senior Applied Machine Learning Engineer

180k - 200k USD

Remote

Full Time

#Machine Learning

#Computer Vision

#Engineering

#Python

#PyTorch

#Docker

#AWS

#Distributed Systems

#Systems

#Performance Optimization

Sift

Software Engineer

Remote

Full Time

#Fraud Detection

#Infrastructure

#Platform Engineering

#Java

#Python

#Terraform

#Kubernetes

#GCP

#AWS

#Kafka

#Jenkins

#Docker

#Spark

CoinsPaid

DevOps Engineer

Remote

Full Time

#DevOps

#Engineering

#Fintech

#Kubernetes

#Docker

#Helm

#Terraform

#AWS

#Linux

#Python

#Prometheus

Syrve

L3 Tech Support Team Manager

Remote

Full Time

#Tech Support

#Team Leadership

#Restaurant

#Technical Support

#APIs

#Databases

#Integrations

#Jira

#Confluence

#Zendesk

#Incident Management

#Root Cause Analysis

Cake

Staff Software Engineer, ML Platform

Remote

Full Time

#Platform

#Distributed Systems

#Cloud Infrastructure

#Kubernetes

#Terraform

#Go

#TypeScript

#AWS

#GCP

#Azure

#Istio

#MLOps

Keyrock

VP Product Capital Markets

Remote

Full Time

#Capital Markets

#Digital Assets

#Product Management

#Risk Management

#DeFi

#Web3

#Stakeholder Management

#Regulatory Compliance

#Trading

#APIs

#Smart Contracts

Innovativesol-2

AI Data Architect

Remote

Full Time

#Cloud Architecture

#Data Engineering

#AI

#AWS

#Azure

#Python

#SQL

#Data Modeling

#ETL

#Big Data

#Machine Learning

Pagos

Software Engineer, Data Platform

Remote

Full Time

#Data Engineering

#Backend Development

#Payments

#REST APIs

#GRPC APIs

#SQL Queries

#Data Pipelines

#Cloud Platforms

#AWS

#GCP

#Apache Spark

#DBT

#Apache Airflow

Mactores

Technical Content Writer

Remote

Full Time

#Data Engineering

#Technical Writing

#Cloud Computing

#AWS

#Snowflake

#Databricks

#Azure

#SEO

#AI Tools

#Content Management

#Apache Spark

#Apache Iceberg

#Data Pipelines

TokyoTechie

Blockchain NFT Developer

Remote

Full Time

#Technology

#Blockchain

#Consulting

#NFT

#Ethereum

#Smart Contracts

#NodeJS

#Python

#Go

#Java

#AWS

#Distributed Systems

Xebia

Senior DevOps Platform Engineer

Remote

Full Time

#DevOps

#Platform Engineering

#Harness

#Kubernetes

#Terraform

#AWS

#Azure

#GCP

#GitOps

#Observability

#Security

#Ansible

Immuta

Enterprise Account Executive

Remote

Full Time

#Enterprise Sales

#Data Security

#Snowflake

#Databricks

#AWS

#Azure

#Google Cloud

#Sales

#Pipeline Management

Prime Financial Technologies

ML Engineer

Remote

Full Time

#Data Science

#Machine Learning

#Fintech

#Python

#JavaScript

#AWS

#Databricks

#Spark

#PostgreSQL

#DynamoDB

#Flask

#React

Kayzen

DevOps Engineer

India

Remote

Full Time

#DevOps

#Infrastructure

#AdTech

#Shell Scripting

#Python

#Java

#SQL

#Terraform

#Ansible

#HAProxy

#Nginx

#Kubernetes

#Prometheus

Sportalliance

IT Specialist System Integration

Germany

Remote

Full Time

#IT Support

#System Integration

#Tech

#Hardware

#ITSM

#Jira

#Management

#user

#Process Optimization

Homebound

Senior Software Engineer

Remote

Full Time

#Software Engineering

#Full Stack

#TypeScript

#Node

#React

#GraphQL

#PostgreSQL

#AWS

#AI Tools

COINS

Chief Compliance Officer

Remote

Full Time

#Compliance

#Crypto

#Strategy

#Regulatory Compliance

#Stakeholder Management

#Risk Management

#Financial Services

#Leadership

DevGrid

Python Developer

Remote

Full Time

#Machine Learning

#Software Engineering

#Backend Development

#Python

#Django

#Flask

#Pandas

#NumPy

#AWS

#RESTful Services

#Distributed Systems

OnePay

Software Engineer

Remote

Full Time

#Fintech

#Backend Engineering

#Product Development

#Node.Js

#TypeScript

#NestJS

#Kubernetes

#AWS

#React Native

#APIs

#Microservices

Your dream job awaits.

Explore exciting opportunities, connect with top employers, and ignite your career.

Explore Jobs

Related Resources

Technology Salary Guide

Compensation data for Technology roles

Technology Job Market

Hiring trends and demand for Technology

Technology Interview Prep

Practice questions for Technology interviews

Risk Management Salary Guide

Compensation data for Risk Management roles

Risk Management Job Market

Hiring trends and demand for Risk Management

Risk Management Interview Prep

Practice questions for Risk Management interviews

InfoSec Compliance Analyst at Zus Health