Information Security Compliance Analyst - Remote

Overview

Join us in creating a better way! At eHealth, our mission is to expertly guide consumers through their health insurance and related options when, where, and how they prefer. We’re creating a better way – one that’s transparent and trustworthy for both our consumers externally and our employees internally.

In Short

• Work with stakeholders across IT, Engineering, Legal, and HR.
• Assess and evaluate security controls aligned with SOC2.
• Assist with internal and external audit engagements.
• Organize audit evidence and manage control libraries.
• Develop metrics to report to management.
• Contribute to eHealth’s compliance maturity.
• Assist in security awareness training and phishing exercises.
• Evaluate new vendors for security concerns.
• Support the development of enterprise AI policies.
• Foster a risk-aware culture throughout the company.

Requirements

• Bachelor's degree in Information Security or related field.
• 3+ years of experience in Information Security audit settings.
• Knowledge of security controls including NIST and HIPAA.
• Strong written and verbal communication skills.
• Attention to detail and strong research skills.
• Experience with risk management tool administration.
• Ability to analyze problems from different angles.
• Ability to communicate technical language to non-technical stakeholders.
• Ability to exercise judgment within defined procedures.
• Collaborative working relationship in a fast-paced environment.

Benefits

• Generous medical, dental, and vision benefits from day one.
• 401K with matching.
• Tuition reimbursement.
• Employee stock purchase program.
• 12 company-paid holidays and flexible time off.