What are the responsibilities and job description for the Senior Security Analyst position at MPOWERHealth?
Overview
About MPOWERHealth:
For over a decade, MPOWERHealth has supported the independent musculoskeletal physician with best-in-class clinical services, back-office solutions, and advanced technology. We pride ourselves on being a partner that offers foresight to customers. We simplify what’s complex, and we help them find a better way. Our best-in-class analytics coupled with industry-leading expertise make MPOWERHealth the company our customers can rely on no matter what lies ahead.
As a Sr. Security Analyst, you will play a critical role in guiding the day-to-day and strategic direction of MPOWERHealth's IT security and compliance initiatives. You will help shape and implement our security posture, support regulatory compliance efforts (HIPAA, SOC 2), and serve as a trusted advisor across both technical and non-technical teams. You will also provide mentorship to junior analysts, drive cross-functional security projects, and begin to take on leadership responsibilities as the company prepares to scale its security function into a full management structure.
This role is ideal for a high-performing security professional who is ready to step into leadership and grow into a management position.
Responsibilities
- Lead the detection and response to security events through monitoring, alert analysis, incident containment, and root cause analysis.
- Drive security operations by managing IT security projects, proposing innovative defenses, and improving incident response workflows.
- Provide technical leadership to security analysts, acting as a mentor and setting the standard for quality and professionalism.
- Develop and enforce security policies and documentation aligned with HIPAA, SOC 2, and best practices such as NIST, HITRUST, and ISO 27001.
- Conduct proactive security assessments and vulnerability scans, guiding teams through remediation and risk mitigation.
- Partner cross-functionally with engineering, legal, and compliance to embed security into business processes and infrastructure.
- Evaluate and implement advanced security tools, including SIEMs, MDR/EDR, IDS/IPS, and cloud-native security solutions (e.g., Microsoft Defender, Sentinel, and Purview).
- Act as a security ambassador across the organization, translating complex technical issues into accessible guidance for broader business stakeholders.
- Maintain fluency in emerging risks and technology trends, anticipating threats and aligning internal roadmaps accordingly.
Qualifications
- Bachelor’s degree in Information Security, Computer Science, or related field—or equivalent professional experience.
- 5 years of experience in information security roles, ideally in healthcare or regulated environments.
- 5 years of general IT experience across systems, networking, or cloud platforms.
- Deep expertise in Microsoft 365 & Azure, including Defender, Sentinel, and Purview.
- Proven experience with security frameworks such as NIST CSF, HITRUST, or ISO 27001.
- Hands-on knowledge of security platforms and practices (SIEM, vulnerability management, IDS/IPS, MDR/EDR).
- Familiarity with compliance frameworks including HIPAA and SOC 2.
- Excellent communication and leadership skills—must be able to lead meetings, mentor others, and translate complex ideas clearly.
- Strong documentation and reporting skills.
Benefits:
- Multiple medical plan options
- Health Savings Account with company contributions
- Dental & vision coverage for you and your dependents
- 401k with Company match
- Vacation, sick time & Company paid holidays
- Company wellbeing program with health insurance incentives
What’s Next?
If you’re ready to bring your skills and passion to our growing team, we want to hear from you! Apply today and help us create a future where success is the standard.