IT & Security Analyst

Company overview

Lumina Care is focused on unifying, coordinating, and managing care for geriatric patients in nursing facilities and at home. We offer a range of services to improve health outcomes and quality of life for patients, including afterhours telehealth, transitional care, chronic care, remote patient monitoring, behavioral health and telehealth psychiatry.

Job title

IT & Security Analyst, reporting to Chief Information Security Officer (CISO)

Purpose/Summary

The IT & Security Analyst supports the information security and IT operations functions of a healthcare organization. The position is responsible for user access and security audits, investigation of policy and control gaps, administration of security tools, and management of the device lifecycle. The IT & Security Analyst works with the internal help desk team and an external managed service provider, and reports directly to the Chief Information Security Officer (CISO).

This position is designed for an IT professional with a systems administration background who intends to build a career in information security and risk management. The IT & Security Analyst will initially support audits, investigations, and security projects under the direction of the CISO. Over time, and with training from the CISO, the IT & Security Analyst is expected to take ownership of defined projects, including the planning and execution of audits and investigations. Full ownership is not expected at the start of employment.

Role & Core Responsibilities

Responsibilities expand over time. The IT & Security Analyst begins in a supporting role and progressively assumes ownership of the items below as training is completed.

Audits and Investigations

• Conduct periodic user access audits across Microsoft 365, line-of-business applications, and care platforms, and track findings through remediation.
• Perform internal security audits and collect evidence in support of HIPAA compliance.
• Identify and investigate gaps in multi-factor authentication coverage, and coordinate with users and managers to close them.
• Identify and investigate personal (BYOD) devices that access organizational data, and bring them into compliance or remove access.
• Investigate non-compliance with IT and security procedures, including the password policy, and document findings and corrective actions.
• Participate in internal risk assessments, including the identification, analysis, and documentation of risks.
• Progress to ownership of defined audit and investigation projects, from planning through final report, with training and oversight from the CISO.

Policy and Documentation

• Draft and update IT and information security policies, standards, and procedures for review and approval by the CISO.
• Use approved AI tools to support research, analysis, policy drafting, and audit documentation, in line with organizational data-handling requirements.

Security Tools

• Administer the enterprise password management platform, including user provisioning, shared folder structure, policy enforcement, and adoption reporting.
• Assist with the administration of additional security tools as they are introduced.
• Monitor security alerts and escalate potential incidents in accordance with established procedures.

IT Operations

• Manage the device lifecycle, including returns, redeployment, replacements, and shipment of equipment to staff.
• Coordinate IT procurement, including quotes, purchase orders, asset records, and vendor follow-up.
• Support onboarding and offboarding activities in coordination with the process owners.
• Administer Microsoft 365, Entra ID, and Intune, including users, groups, devices, and policies.
• Serve as the escalation point for the help desk team on security and access matters.
• Coordinate with the managed service provider on projects, escalations, and security tasks.
• Maintain accurate and current IT and security documentation.

The listed responsibilities are not an exhaustive list and may contain other duties as assigned. Consistent with the Americans with Disabilities Act (ADA), it is the policy of Lumina Care to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship.

Qualifications

Required

• Minimum of one (1) year of IT experience in a healthcare environment, such as a hospital, clinic, home care agency, payer, or managed service provider with healthcare clients.
• Hands-on experience administering Microsoft 365 environments, including Entra ID, Exchange Online, and Intune.
• Three (3) years of total experience in IT support or systems administration.
• Working knowledge of HIPAA Security Rule requirements and the handling of protected health information.
• Experience with multi-factor authentication enrollment or enforcement.
• Experience with device and asset management, including equipment returns and replacements.
• Ability to enforce policy with users in a professional and direct manner.
• Strong written communication and documentation skills.
• Highly organized, with the ability to manage multiple audits, investigations, and operational tasks at the same time, track open items, and meet deadlines.
• Basic knowledge of IT and security policy structure, with the ability to draft policies and procedures.
• Familiarity with and regular use of AI tools, such as Microsoft Copilot, ChatGPT, or Claude, for research, analysis, and documentation.
• Demonstrated interest in an information security career, through formal study, certification progress, or project work.

Preferred

• CompTIA Security+ certification, or active progress toward it.
• Experience with Conditional Access or Intune device compliance policies.
• Administrative experience with an enterprise password manager, such as Keeper, 1Password, or Bitwarden.
• Experience with BYOD policy or mobile application management (MAM).
• Experience working with a managed service provider or external IT vendor.
• Experience supporting an electronic health record (EHR) or care management platform.
• Participation in a HIPAA risk assessment, security audit, or access review.
• Prior experience drafting or updating policies against a framework such as HIPAA, NIST CSF, or CIS Controls.
• Experience with IT procurement or vendor management.
• PowerShell scripting for administrative and reporting tasks.

Working conditions

A designated, secure, and private home workspace is required for this remote role to ensure compliance with HIPAA and company privacy and security policies. This workspace must support confidential patient communications and prevent unauthorized access to protected health information. Typing is required and you will be required to use Company approved virtual technology to visualize patients during visits. A personally owned computer used for this role must meet all company-mandated security and encryption requirements as defined by the IT team. Company-provided security software, including platforms for patient video consultations, may need to be installed to ensure the device remains compliant with organizational data protection standards. Periods of prolonged sitting or standing can be expected. Travel requirements could occur based on specific state licensure and leadership needs.

Compensation

$80,000 to $90,000. Compensation is determined based on market range, experience, skills, education, and qualifications.

List of other benefits.

We offer a comprehensive and competitive benefits package to support our employees, including:

• Medical, Dental, and Vision Insurance
• Paid Time Off (PTO)
• Paid Holidays and Floating Holidays
• Flexible Work Arrangements and Remote Work Options

Summary

Lumina Care is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, or any other characteristic protected by law.

Pay: $80,000.00 - $90,000.00 per year

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Experience

• Healthcare IT: 1 year (Required)
• IT support: 3 years (Required)
• Microsoft 365: 1 year (Required)

Work Location: Hybrid remote in Manhattan, NY 10008