Senior Information Security Compliance Analyst

Overview

Ardent Health is a leading provider of healthcare in growing mid-sized urban communities across the U.S. With a focus on people and investments in innovative services and technologies, Ardent is passionate about making healthcare better and easier to access. Through its subsidiaries, Ardent delivers care through a system of 30 acute care hospitals, 24,000+ team members and more than 280 sites of care with over 1,800 affiliated providers across six states.

POSITION SUMMARY :

The Senior Information Security Compliance Analyst will ensure the development and maintenance of ITGC policies and procedures in alignment with SOX, PCI, and HIPAA requirements. This role will assist in managing the Risk and Control Matrix (RACM), monitoring compliance, and conducting risk assessments across these regulatory frameworks. The position will work closely with IT leadership, subject matter experts, and Internal Audit to maintain a robust and comprehensive IT compliance program.

Responsibilities

• Assist in designing, coordinating and executing ITGCs for internal / external audit to evaluate and ensure compliance with SOX 404, PCI DSS, and HIPAA.
• Collaborate with control owners and stakeholders to address identified compliance gaps or audit findings.
• Maintain the Risk and Control Matrix (RACM) by ensuring control descriptions are accurate, effective, and aligned with SOX, PCI, and HIPAA objectives.
• Conduct systematic risk assessments to identify, evaluate, and prioritize risks related to SOX, PCI, and HIPAA compliance.
• Develop and conduct training programs to educate control owners and stakeholders on SOX, PCI, and HIPAA compliance requirements.

Qualifications

Education & Experience :

Knowledge, Skills & Abilities :

#LI-AG1