About Hello Heart:
Hello Heart is on a mission to change the way people care for their hearts. The company provides the first app and connected heart monitor to help people track and manage their heart health. With Hello Heart users take steps to control their risk of heart attacks and stroke the leading cause of death in the United States. Peer-reviewed studies have shown that high-risk users of Hello Heart have seen meaningful drops in blood pressure cholesterol and even weight. Recognized as the digital leader in preventive heart health Hello Heart is trusted by more than 130 leading Fortune 500 and government employers national health plans and labor organizations. Founded in 2013 Hello Heart has raised more than $138 million from top venture firms and is a best-in-class solution on the American Heart Associations Innovators Network and CVS Health Point Solutions Management platform. Visit for more information.
About the Role
We are seeking a Cyber Security Analyst to strengthen our security operations and compliance posture. Reporting into our Information Security Officer you will play a key role in protecting sensitive data ensuring regulatory compliance and supporting the secure adoption of new technologies such as AI. You will work cross-functionally with IT Engineering Compliance and HR to build and maintain secure resilient processes across the organization.
Responsibilities
- Support secure access lifecycle processes including provisioning deprovisioning role-based access and MFA/SSO management
- Conduct periodic access reviews and ensure identity data quality
- Perform vulnerability scans across systems and applications track remediation progress and partner with teams to prioritize risk-based fixes
- Assist with security assessments of cloud systems and applications aligning with HIPAA HITECH NIST and HITRUST frameworks
- Support internal and external audit preparation and execution
- Enforce encryption access controls and data loss prevention strategies for sensitive data
- Conduct third-party vendor risk assessments and oversee remediation efforts
- Support secure adoption of AI tools by monitoring for risks such as data leakage and prompt injection establishing governance guardrails and delivering awareness training
- Participate in endpoint security monitoring disaster recovery exercises tabletop simulations and awareness training initiatives
- Contribute to ongoing security operations risk management efforts and special security projects
Qualifications
- 3 years of experience in IAM IAM operations or security analyst roles (healthcare technology or other regulated environments preferred)
- Hands-on experience with identity platforms such as Okta Azure AD or Google IdP plus SCIM SAML/OIDC/OAuth directory services group policy and conditional access
- Experience with vulnerability management platforms (Tenable Qualys Rapid7 AWS Inspect Kandji) and patch orchestration workflows
- Working knowledge of HIPAA HITECH NIST CSF/800-66 and CIS Controls (familiarity with HITRUST CSF is a plus)
- Knowledge of cloud security basics (AWS Azure GCP) least-privilege IAM and networking fundamentals (TCP/IP DNS HTTP VPN segmentation)
- Familiarity with endpoint security solutions (CrowdStrike Falcon Cynet SentinelOne) and DLP tools
- Familiarity with GenAI keeping up to date with innovative security programs and artificial intelligence systems
- Proactive communication and documentation skills with the ability to collaborate across technical and non-technical teams globally
The US base salary range for this full-time position is $130000.00 to $145000.00. Salary ranges are determined by role and level. Compensation is determined by additional factors including job-related skills experience and relevant education or training. Please note that the compensation details listed in US role postings reflect the salary only and do not include equity or benefits.
#LI-DNP
Hello Heart has a positive diverse and supportive culture - we look for people who are collaborative creative and courageous. Oh and if you want to see some recent evidence of the fun things we do at Hello Heart check out our Instagram page.
Required Experience:
IC
About Hello Heart:Hello Heart is on a mission to change the way people care for their hearts. The company provides the first app and connected heart monitor to help people track and manage their heart health. With Hello Heart users take steps to control their risk of heart attacks and stroke the le...
About Hello Heart:
Hello Heart is on a mission to change the way people care for their hearts. The company provides the first app and connected heart monitor to help people track and manage their heart health. With Hello Heart users take steps to control their risk of heart attacks and stroke the leading cause of death in the United States. Peer-reviewed studies have shown that high-risk users of Hello Heart have seen meaningful drops in blood pressure cholesterol and even weight. Recognized as the digital leader in preventive heart health Hello Heart is trusted by more than 130 leading Fortune 500 and government employers national health plans and labor organizations. Founded in 2013 Hello Heart has raised more than $138 million from top venture firms and is a best-in-class solution on the American Heart Associations Innovators Network and CVS Health Point Solutions Management platform. Visit for more information.
About the Role
We are seeking a Cyber Security Analyst to strengthen our security operations and compliance posture. Reporting into our Information Security Officer you will play a key role in protecting sensitive data ensuring regulatory compliance and supporting the secure adoption of new technologies such as AI. You will work cross-functionally with IT Engineering Compliance and HR to build and maintain secure resilient processes across the organization.
Responsibilities
- Support secure access lifecycle processes including provisioning deprovisioning role-based access and MFA/SSO management
- Conduct periodic access reviews and ensure identity data quality
- Perform vulnerability scans across systems and applications track remediation progress and partner with teams to prioritize risk-based fixes
- Assist with security assessments of cloud systems and applications aligning with HIPAA HITECH NIST and HITRUST frameworks
- Support internal and external audit preparation and execution
- Enforce encryption access controls and data loss prevention strategies for sensitive data
- Conduct third-party vendor risk assessments and oversee remediation efforts
- Support secure adoption of AI tools by monitoring for risks such as data leakage and prompt injection establishing governance guardrails and delivering awareness training
- Participate in endpoint security monitoring disaster recovery exercises tabletop simulations and awareness training initiatives
- Contribute to ongoing security operations risk management efforts and special security projects
Qualifications
- 3 years of experience in IAM IAM operations or security analyst roles (healthcare technology or other regulated environments preferred)
- Hands-on experience with identity platforms such as Okta Azure AD or Google IdP plus SCIM SAML/OIDC/OAuth directory services group policy and conditional access
- Experience with vulnerability management platforms (Tenable Qualys Rapid7 AWS Inspect Kandji) and patch orchestration workflows
- Working knowledge of HIPAA HITECH NIST CSF/800-66 and CIS Controls (familiarity with HITRUST CSF is a plus)
- Knowledge of cloud security basics (AWS Azure GCP) least-privilege IAM and networking fundamentals (TCP/IP DNS HTTP VPN segmentation)
- Familiarity with endpoint security solutions (CrowdStrike Falcon Cynet SentinelOne) and DLP tools
- Familiarity with GenAI keeping up to date with innovative security programs and artificial intelligence systems
- Proactive communication and documentation skills with the ability to collaborate across technical and non-technical teams globally
The US base salary range for this full-time position is $130000.00 to $145000.00. Salary ranges are determined by role and level. Compensation is determined by additional factors including job-related skills experience and relevant education or training. Please note that the compensation details listed in US role postings reflect the salary only and do not include equity or benefits.
#LI-DNP
Hello Heart has a positive diverse and supportive culture - we look for people who are collaborative creative and courageous. Oh and if you want to see some recent evidence of the fun things we do at Hello Heart check out our Instagram page.
Required Experience:
IC
View more
View less