Client Security Analyst

The Client Security Analyst is a high-visibility, cross-functional role responsible for owning and centralizing the client security review process. Acting as the primary point of contact for all security questionnaires, this position manages the full lifecycle, from initial request through final delivery.The analyst will triage and coordinate inputs from Security, Engineering, and IT teams to ensure timely and accurate responses, while driving process improvements that enhance both the sales and client success cycles. This is a remote role that sits within the Governance, Risk & Compliance (GRC) team and reports directly to the Senior Manager, GRC.

Responsibilities :

• Own the end-to-end process for all client and prospect security questionnaires, acting as the central project manager from the initial JIRA ticket to final delivery.
• Review, triage, and assign all questions to the appropriate cross-functional teams (, Engineering, IT, Legal), eliminating ambiguity and coordination burdens from the Client Success Managers (CSMs).
• Collaborate with and track progress from all internal stakeholders, actively managing timelines to ensure responses are accurate and completed within established SLAs.
• Perform final quality assurance (QA) reviews on all completed questionnaires to ensure the document is cohesive, professional, and all questions are answered before client delivery.
• Partner with GRC leadership to develop, document, and refine standardized workflows, creating clear success metrics (, reduced turnaround time).
• Act as the primary point of contact for the Sales and Client Success teams on all security-related inquiries, including escalations for new sales and upsell deals.
• Represent the cybersecurity team on calls with clients and prospects, acting as the expert to address security concerns and build trust.
• Develop, maintain, and promote a "Trust Center" (, using Whistic) by centralizing existing "Go-To-Market Packet" and other documentation to proactively address common security questions.
• Manage the intake process for security reviews of non-standard client agreements, collaborating with Legal to formalize the review of data security and AI clauses.
• Support the Third-Party Risk Management (TPRM) program by helping to manage automated workflows that flag high-risk vendors for GRC review.
• Assist in communicating and enforcing the required Third-Party Security Addendum (TPSA) for new vendors.

Qualifications :

Preferred Qualifications :

Physical / Cognitive Requirements :

Pay : The United States new hire base salary target ranges for this full-time position are : Zone A : $108,890 - $141,560 + equity + benefitsZone B : $119,779 - $155,716 + equity + benefitsZone C : $130,668 - $169,872 + equity + benefitsZone D : $141,557 - $184,028 + equity + benefitsThis range reflects the minimum and maximum target for new hire salaries for candidates based on their respective Zone. Below is additional information on Included Health's commitment to maintaining transparent and equitable compensation practices across our distinct geographic zones.Starting base salary for you will depend on several job-related factors, unique to each candidate, which may include education; training; skills; years and depth of experience; certifications and licensure; our needs; internal peer equity; organizational considerations; and understanding of geographic and market data. Compensation structures and ranges are tailored to each zone's unique market conditions to ensure that all employees receive fair and great compensation package based on their roles and locations. Your Recruiter can share your geographic zone upon inquiry. Benefits & Perks : In addition to receiving a great compensation package, the compensation package may include, depending on the role, the following and more : Remote-first culture401(k) savings plan through FidelityComprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance)Paid Time Off ("PTO") and Discretionary Time Off (“DTO")12 weeks of 100% Paid Parental leaveFamily Building & Compassionate Leave : Fertility coverage, $25,000 for surrogacy / adoption, and paid leave for failed treatments, adoption or pregnancies.Work-From-Home reimbursement to support team collaboration home office workYour recruiter will share more about the salary range and benefits package for your role during the hiring process.