Security Analyst (Remote)

The START Center for Cancer Research (“START”) is the world’s largest early phase site network, fully dedicated to oncology clinical research. Throughout our history, START has provided hope to cancer patients in global community practices by offering "Hope Through Access” to cutting edge trials throughout the United States and Europe.   

Position Summary

The Security Analyst supports START Research's cybersecurity governance, risk, and compliance program. This role is responsible for evaluating security controls, supporting regulatory and framework compliance, conducting risk assessments, and maintaining key components of the organization's Information Security Management System (ISMS). The position partners with stakeholders across the business to strengthen security practices and protect clinical research data and systems.

This is a remote role. The salary range for this role is $85,000 - $100,000. However, base pay may vary depending on multiple individualized factors including market location, job-related knowledge, skills, and experience. 

Work Hours: M-F, 8am-5pm 

Location: Remote

Essential Responsibilities

• Support IT governance and oversight, risk assessment, and security awareness across the clinical research environment.
• Conduct internal auditing and evidence collection for IT controls compliance (HIPAA, HITECH, GDPR) and cybersecurity ISMS frameworks (SOC 2).
• Perform Vendor Risk Management assessment, onboarding, and ongoing reviews for trial sponsors, CROs, and technology partners.
• Conduct Business Impact Analysis (BIA) and Sensitive Data Reviews (SDR) with a focus on clinical trial data, PHI, and PII.
• Perform User Rights Management (URM) and Privileged Access Management (PAM) reviews for critical applications, including Entra ID, CrowdStrike, and clinical platforms.
• Provide support in the assessment, design, and implementation of technical control requirements aligned to CIS Controls v8 and NIST CSF v2.
• Identify and recommend changes to improve efficiency and effectiveness of key technical controls and processes.
• Partner with control owners and system administrators to ensure quality, consistency, and operability of new and existing controls.
• Support the review of IT systems and tools to ensure the inclusion of appropriate controls and processes.
• Review test findings, support the remediation of IT control gaps, and escalate potential issues to security leadership as necessary.
• Validate and update IT documentation as needed to ensure processes, policies, and controls are accurate and audit-ready.
• Support incident response activities and contribute to security operations functions as needed.

Required Education and Experience

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3+ years of audit, compliance, or technical experience, preferably in healthcare, life sciences, or clinical research environments.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices, including HIPAA, SOC 2, and NIST CSF.
• Experience with security tooling such as EDR/MDR platforms, SIEM, identity management (Entra ID), and vulnerability management solutions.
• Effective communication skills (written and verbal) to properly articulate complex IT controls and compliance issues to leadership, audit partners, and clinical staff.
• Positive attitude and a strong commitment to delivering quality work in a mission-driven environment.
• Relevant training and/or industry certifications in auditing, compliance, or IT security (e.g., CISA, CISSP, Security+, CISM).

Physical and Travel Requirements

• Approximately 80% of time is spent sitting.
• Very fast-paced and ever-changing healthcare environment.
• Demanding deadlines and time frames.
• Constant demand for updating knowledge.
  

Best-in-Class Benefits and Perks  

We value the time, talent, and dedication our employees bring to START. Our commitment to your well-being and growth is reflected in a competitive compensation package—based on experience—along with comprehensive benefits designed to support you both personally and professionally:  

• 401(k) retirement savings plan with employer match  

• Eligibility for an annual performance bonus, based on role and company results  

• Generous paid time off and paid holidays  

• Comprehensive medical, dental, and vision coverage and optional insurance options  

• Company paid life and disability insurance for added financial protection  

• Employee Assistance Program (EAP) providing confidential, no ‑cost support for you and your family from day one  

• Flexible FSA and HSA plans to support your financial wellness  

• Commitment to a supportive environment that values balance, wellbeing, and flexibility  

• We’re committed to fostering a collaborative, creative workplace where every team member is encouraged to contribute. At START, you’ll join a team that values continuous learning, professional growth, shared ideas, and a culture built on inclusivity and innovation.  

More About START  

START clinical trial sites have conducted more than 1,000 early-phase clinical trials, including dozens of therapies that were approved by the FDA or EMA. START represents the world’s largest roster of early-phase principal investigators across its Network of clinical trial sites.

Learn more at STARTresearch.com.   

Ready to be part of a team changing the future of cancer treatment?  

Join us in our mission to conquer cancer, one clinical trial at a time. Your expertise and dedication can help us bring hope and healing to patients worldwide. Please submit your application online.  

We are an equal opportunity employer that welcomes and encourages diversity in the workplace. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.