HIPAA Security Risk & Compliance Analyst

Bluu Kazi is recruiting risk and compliance analysts for HIPAA-regulated healthcare organizations in Greater St. Louis that are maturing their security programs toward SOC 2 and need someone to run risk work end to end. You will own the risk program, not just a piece of it, and see your work show up directly in audit results.

• Lead the annual HIPAA Security Risk Assessment: inventory where protected health information lives, identify threats and gaps against the HIPAA Security Rule, rate risk and build the remediation plan.

• Track remediation with IT and managed-service partners until each risk is closed or formally accepted.

• Drive SOC 2 readiness: map controls, collect evidence and prepare for the auditor.

• Run third-party risk management: vendor security reviews, business associate agreements (BAAs) and annual reassessments.

• Write and maintain security policies and procedures aligned with HIPAA, SOC 2 and NIST guidance.

• Coordinate penetration tests and business continuity and disaster recovery tests, and document results.

• Lead security awareness training and phishing simulations.

• Report risk posture to leadership in plain language.

• 3 to 6 years in IT risk, security compliance, GRC or IT audit, including at least one full HIPAA Security Risk Assessment.

• Working knowledge of the HIPAA Security and Privacy Rules, SOC 2 Trust Services Criteria, and NIST SP 800-30 or the NIST Cybersecurity Framework.

• Experience managing vendor risk and BAAs.

• Strong writing: clear risk registers, policies and executive summaries.

• A certification such as CISA, CRISC, CHPS, HCISPP, CISSP or Security+, or the ability to earn one in the first year.

• A compliance platform such as Vanta, Drata or Secureframe.

• Healthcare or behavioral health experience.

• Microsoft 365 compliance tools.

• A direct line to the hiring team. BLUU KAZI presents your profile in person, so your application never disappears into a portal.
• Coaching at every stage. Interview preparation, feedback after each round and support through the offer.
• Room to grow. Access to BLUU KAZI training and certification paths in cybersecurity, cloud and AI.
• A bench that works for you. Join our network of emerging and veteran technologists and hear first about roles that fit.