Job Description

For 30 years, Surgical Information Systems (SIS) has empowered surgical providers to Operate Smart™ by delivering innovative software and services that drive clinical, financial, and operational success. For ambulatory surgery centers (ASCs), SIS provides comprehensive software and services, including ASC management, electronic health records (EHRs), patient engagement capabilities, compliance technology, and revenue cycle management and transcription services, all built specifically for ASCs. For hospital perioperative teams, SIS offers an easy-to-use anesthesia information management system (AIMS).

Serving over 2,900 surgical facilities, SIS is committed to delivering solutions that enable surgical providers to focus on what matters most: delivering exceptional patient care and outcomes.

Recognized as the No. 1 ASC EHR vendor by Black Book for 11 consecutive years and honored with the Best in KLAS Award for ASC Solutions in 2026, 2025, 2023, and 2022, SIS remains the trusted choice for surgical providers seeking to enhance their performance.

Discover how SIS can help you Operate Smart™ at sisfirst.com.

The Security Analyst owns the day-to-day analytical and coordination workload across security operations, vulnerability management, identity governance, incident response support, audit readiness, and security control monitoring. The role acts as an execution partner to the Security Manager, providing operational depth, disciplined follow-through, and clear escalation. Management retains accountability for security strategy, architecture decisions, material risk acceptance, and executive governance. This role supports the confidentiality, integrity, and availability of systems that process sensitive healthcare information for more than 2,900 ambulatory surgery centers nationwide.

• Complete work in a thorough and timely manner in accordance with applicable standards, defined plans, budgets, schedules, and risk priorities.
• Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.

ESSENTIAL DUTIES/ RESPONSIBILITIES:

• Monitor, analyze, and triage security alerts, anomalous activity, vulnerabilities, suspicious access, and potential data exposure events across cloud, SaaS, endpoint, network, and identity environments.
• Conduct initial incident triage and investigation. Collect and preserve relevant evidence, document findings, and coordinate escalation, containment, and remediation activities under established incident response procedures.
• Coordinate vulnerability prioritization, remediation tracking, exception documentation, and closure validation with IT, DevOps, development, and applicable system owners.
• Support identity governance activities, including user access reviews, privileged access reviews, MFA and conditional access validation, service account reviews, and termination and offboarding checks.
• Validate security control coverage and configuration effectiveness, identify gaps, and coordinate with control owners to support timely risk reduction and remediation.
• Support SOC 2, HITRUST, HIPAA, client security request, and audit readiness activities through evidence collection, control testing support, documentation, and issue follow-up.
• Prepare clear operational reporting on security events, vulnerabilities, cloud and SaaS risk indicators, incident trends, remediation status, and control coverage.
• Participate in security reviews of product changes, cloud deployments, vendor integrations, and technical designs by identifying gaps, documenting findings, and escalating material risk to the Security Manager.
• Prepare concise findings, risk summaries, and remediation recommendations for review by the Security Manager and CISO.
• Maintain accurate documentation of procedures, investigations, and recurring security operations tasks

SPECIFIC KNOWLEDGE & SKILLS REQUIRED:

• Three to five years of experience in security operations, systems administration, network administration, cloud administration, or similar technology environments; healthcare IT or SaaS experience preferred.
• Hands-on experience with security monitoring, incident triage, vulnerability management, log analysis, identity security concepts, cloud security concepts, data protection, and audit support.
• Working knowledge of HIPAA-related security and privacy expectations, SaaS or healthcare technology environments, third-party risk, and secure handling of sensitive data.
• Ability to work independently on assigned operational priorities while escalating material risks, blockers, and decisions requiring management direction.
• Strong written and oral communication and documentation skills, with the ability to translate technical findings into concise risk and remediation summaries for technical and non-technical stakeholders.
• Perform other duties as assigned.

CERTIFICATIONS:

• Security, cloud, or incident response certification preferred (such as Security+, CySA+, AZ-500, or GCIH), or ability to achieve a relevant certification within the first year.

BENEFITS:

• Benefit package including Medical, Vision, Dental, Short Term Disability, Long Term Disability, and Life Insurance
• Vacation/Sick time
• 401(k) retirement plan with company match
• Paid Holidays
• SIS Cares Day
• Hybrid or Remote environment depending on the role