Job Description

At Prime Therapeutics (Prime), we are a different kind of PBM, with a purpose beyond profits and a unique ability to connect care for those we serve. Looking for a purpose-driven career? Come build the future of pharmacy with us.
Job Posting Title
IT Risk & Controls Analyst - Remote

The Risk & Controls Analyst is responsible for executing processes that ensure IT's compliance with regulatory, industry and client security requirements. This role is responsible for working with cross-functional teams on the day to day operational activities needed to support the Security Governance Risk and Compliance program.
Responsibilities

• Update and publish organization wide security standards, policies and procedures
• Test and collect evidence that controls are designed and operating effectively, including evidence needed to verify compliance to security requirements to HITRUST, SOC 2, HIPAA, and client contracts
• Collect metrics to monitor risk and compliance status, assist in vendor and system security risk assessments, including drafting responses to client RFP and assessment requests
• Work with IT to coordinate audit testing and track audit remediation
• Other duties as assigned

Minimum Qualifications

• Bachelor's degree in an analytical discipline such as Computer Science, Finance, or Sciences or related area of study, or equivalent combination of education and/or related work experience; HS diploma or GED is required

• 2 years of experience in Information Security, Information Technology, Risk Management, Audit or Finance
• Must be eligible to work in the United States without need for work visa or residency sponsorship

Must be eligible to work in the United States without the need for work visa or residency sponsorship
Additional Qualifications

• Ability to conduct meetings and give presentations
• Good analytical and critical thinking skills
• Ability to multi-task and manage multiple priorities
• Knowledge of Governance, Risk and Compliance area topics
• Basic understanding of regulatory and/or compliance requirements and frameworks (PCI, HIPAA, SOC1, SOC2, HITRUST, NIST, etc.)
• Basic working knowledge of security solutions and controls

Preferred Qualifications

• Experience producing metrics reporting, writing and presenting communications
• Experience in a regulated industry, health care preferred

Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their job, and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures
Every employee must be able to perform the essential functions of the job and, if requested, reasonable accommodations will be made to enable employees with disabilities to perform the essential functions, absent undue hardship. In addition, Prime retains the right to change or assign other duties to this job.
Potential pay for this position ranges from $74,000.00 - $118,000.00 based on experience and skills.
Prime Therapeutics LLC is proud to be an equal opportunity and affirmative action employer. We encourage diverse candidates to apply, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sex (including pregnancy), national origin, disability, age, veteran status, or any other legally protected class under federal, state, or local law.
We welcome people of different backgrounds, experiences, abilities, and perspectives including qualified applicants with arrest and conviction records and any qualified applicants requiring reasonable accommodations in accordance with the law.
Prime Therapeutics LLC is a Tobacco-Free Workplace employer.
Positions will be posted for a minimum of five consecutive workdays.

Skills Required