> Markdown version of [/jobs/ext/1332871-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/1332871-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT & Security Analyst

- **Company:** Pear Suite
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $93,600.0 - $104,000.0
- **Contract:** Permanent contract
- **Skills:** Software as a Service, Cyber Security, PEAR - PHP Extension and Application Repository, Google Cloud
- **Published:** July 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3eb08873f2ded15b

## About the Role

* At least 3-5 years of experience in IT support, security, compliance, or a related role
 * Solid understanding of HIPAA, HITRUST, SOC 2 frameworks (eagerness to learn counts)
 * Experience with audits, security assessments, or vendor risk program
 * Experience managing access controls, SaaS tools, or device setup/offboarding
 * Self-starter with excellent time management, comfortable operating independently in a fast-paced, ambiguous environment
 * Adaptable and resourceful, willing to wear multiple hats and take ownership across domains
 * Proactive problem-solver with a bias for action and continuous improvement

Nice to Have

 * Experience in a healthcare or B2B SaaS environment
 * Familiarity with GCP, Vanta, or similar security and compliance automation tools
 * Experience with MDM or device management tools
 * Exposure to vendor risk management or third-party security reviews

## Description

Pear Suite is looking for a detail-oriented IT & Security Analyst to support our IT security and compliance efforts on a part-time basis (approx. 20 hrs/week). This is a tactical, hands-on role, you'll work closely with our CTO to keep our systems secure, our access controls tight, and our operations audit-ready.

This is a great opportunity for someone building their career in IT security and compliance who wants deep, practical exposure to HIPAA, HITRUST, and SOC 2 in a fast-moving healthcare SaaS startup, or someone towards the end of the career looking to stay active it the workforce on a part-time basis.

What you'll do

Security & Compliance

 * Support maintenance of HITRUST, HIPAA, and SOC 2 compliance tasks under CTO guidance
 * Help draft and update internal policies and security documentation
 * Conduct annual risk assessments and evidence gathering for third-party audits
 * Monitor security practices and incidents, and drive mitigation efforts

Internal IT Support

 * Execute employee onboarding and offboarding checklists (system access, device setup, deprovisioning)
 * Manage internal tools, access controls, device management, and vendor reviews
 * Support device management and assist with vendor review documentation
 * Help maintain GCP infrastructure compliance documentation alongside the CTO
 * Support incident response and change management proceduresDescribe the specific responsibilities and job functions of the role


## Related Videos

- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)