> Markdown version of [/jobs/ext/3885456-hcs-info-security-analyst-sr](https://www.wearedevelopers.com/jobs/ext/3885456-hcs-info-security-analyst-sr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# HCS Info Security Analyst Sr

- **Company:** University of North Carolina Hospitals
- **Location:** Morrisville, NC, United States
- **Experience:** Expert
- **Salary:** $92,685.0 - $133,245.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, Continuous Integration, Data Infrastructure, Data Security, Systems Theories, Python (Programming Language), Key Management, Log Analysis, Windows PowerShell, Systems Development Life Cycle, Kusto Query Language, Data Streaming, Software Vulnerability Management, Scripting, Enterprise Software Applications, Information Technology, CIS Benchmarks, Devsecops, Security Orchestration, Automation & Response
- **Published:** October 23, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3466594036&tx=JT989TYI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Strong hands-on experience in Azure Cloud Security and Information Security.
 * Practical experience with Microsoft Defender for Cloud and Azure security services.
 * Knowledge of healthcare data compliance frameworks (HIPAA, HITECH, NIST 800-53, SOC, HITRUST, CIS Benchmarks).
 * Understanding cloud security concepts (Azure, AWS, or GCP).
 * Strong written and verbal communication skills.
 * Deep understanding of Azure TRE architecture, enclave boundaries, airlock mechanisms, and isolated cloud workspaces.
 * Advanced proficiency in Microsoft Purview (DLP, Information Protection, eDiscovery, Insider Risk Management).
 * Understanding of KQL log analytics and scripting (PowerShell/Python) for security automation.
 * Embed security into DevSecOps and Secure SDLC , including threat modelling, security requirements, code/IaC/container scanning, secrets management, vulnerability remediation, and CI/CD security gates.
 * Experience supporting healthcare, academic, or research environments.
 * Familiarity with research governance and handling of sensitive or regulated data.
 * Security certifications such as CISSP, CISM, CRISC, Security+, HCISPP, or equivalent.
 * Experience with vendor risk management and third-party security reviews., ? Bachelor's degree in Computer Science, Information Systems Management or a related field (or an equivalent combination of education, training and experience) required.

Licensure/Certification Requirements:

 * No licensure or certification required.
 * Security certifications such as CISSP, CISM, CRISC, Security+, HCISPP, or equivalent are preferred.

Professional Experience Requirements:

? If a Bachelor's degree: Eight (8) years in professional IT positions, with 4 years of experience in related job functions required.

? If an Associate's degree: Twelve (12) years in professional IT positions, with 4 years of experience in related job functions required.

? If a high school diploma or GED: Sixteen (16) years in professional IT positions, with 4 years of experience in related job functions required.

Knowledge/Skills/and Abilities Requirements:

Key Competencies:

 * Risk assessment and analysis
 * Security governance and compliance
 * Vendor and third-party risk management
 * Research data protection
 * Stakeholder communication
 * Documentation and reporting
 * Project coordination

## Description

The Information Security Analyst Sr. supports research and Trusted Research Environment (TRE) initiatives by ensuring that research systems, data, and third-party services meet organizational security, privacy, and compliance requirements. This role partners with research teams, IT, legal, privacy, and vendors to assess risks, implement security controls, and support secure handling of sensitive data., * Conduct security reviews of research projects, applications, and data environments. This can include software packages, In-house developed applications, Cloud architecture proposals.

 * Assess vendor security questionnaires, attestations, and compliance documentation.
 * Evaluate research systems for compliance with organizational security standards and regulatory requirements.
 * Collaborate with researchers, project managers, infrastructure teams, and compliance stakeholders.
 * Review data flows, access controls, authentication methods, and encryption practices.
 * Document risks, recommendations, and mitigation plans.
 * Assist with incident response activities involving research systems or sensitive data.
 * Track remediation activities and provide security consultation throughout project lifecycles.
 * Support audits and reporting related to HIPAA, NIST, ISO 27001, SOC 2, and other applicable frameworks., * Timely completion of security reviews and risk assessments.
 * Effective identification and mitigation of security risks.
 * High-quality documentation and stakeholder engagement.
 * Compliance with organizational and regulatory requirements.
 * Successful support of research and TRE initiatives while maintaining security standards.