Senior Analyst, Cybersecurity

Thank you for considering a career at Ensemble!

Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

The Senior Analyst, Cybersecurity (Quality Assurance & Business Analysis) will play an essential role in safeguarding the quality, reliability, and integrity of Ensemble's internal security systems and tools, serving as the first line of defense against defects, control gaps, and process risks before they reach production. This role will partner with Information Security, IT, and business unit leadership to gather and validate requirements, execute rigorous testing across security platforms and internal applications, and support the successful, on-time delivery of security-related initiatives and enhancements.

Job Competencies

• Valuing Differences - Works effectively with individuals of diverse cultures, interpersonal styles, abilities, motivations, or backgrounds; seeks out and uses unique abilities, insights, and ideas. Considers the collective.
• Collaboration - Works cooperatively within teams and partners with others, both internally and externally as needed, to achieve success; focuses on the results of the team, not the achievements of one person. It's “All for One and One for All.”
• Accountability - Accepts personal responsibility and/or consequences of failure and successes, delivering on commitments and refocusing effort when needed. Someone who is willing to step up and own it.
• Time Management - Effectively manages personal time and resources to ensure that work is completed efficiently.
• Developing Trust - Gains others’ confidence by acting with integrity and following through on commitments; treats others and their ideas with respect and supports them in the face of challenges.
• Takes Initiative - Takes prompt action to accomplish goals and achieve results beyond what is required; is proactive and pursues relentlessly.

Essential Job Functions

• Own the QA process for internal cybersecurity tools and platforms (e.g., SIEM, vulnerability management, GRC/compliance systems, and identity and access management) from test planning through sign-off.
• Develop and maintain test plans, test cases, and regression suites for new features, system changes, and security tool upgrades.
• Perform manual functional, regression, integration, and user acceptance testing; identify, document, and track defects to resolution.
• Develop a risk-based test approach that prioritizes coverage based on business and security impact, in alignment with departmentally defined review methodology.
• Validate data integrity, access controls, and business logic across system changes, upgrades, and migrations.
• Assess control weaknesses identified during testing, make recommendations for improvement, and assist in the formal reporting of deficiencies.
• Establish and report on QA metrics (defect density, escape rate, test coverage) to communicate system quality trends to leadership.
• Develop a thorough understanding of business processes in scope for assigned systems and document the processes in flowcharts and process narratives.
• Gather, document, and validate business requirements from Information Security and internal stakeholders for system changes, enhancements, and new tools.
• Translate business and security needs into clear functional specifications, user stories, and acceptance criteria for engineering and QA.
• Facilitate requirements workshops and stakeholder interviews across departments; serve as the liaison between business users and technical teams.
• Help plan and track timelines, milestones, and dependencies for small- to mid-size security system initiatives.
• Coordinate user acceptance testing cycles, release readiness checklists, and go-live activities; keep stakeholders informed on status, risks, and blockers.
• Maintain current knowledge of cybersecurity best practices, compliance standards, and other general technical and business matters relevant to the role.
• This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Associates may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation.

Employment Qualifications

• Required Minimum Education: Bachelor's Degree
• Preferred Education: Bachelor's Degree in Information Security, Computer Science, Information Systems, or related field
• Minimum Years and Type of Experience: 5–7+ years of experience in Quality Assurance, Business Analysis, or a related technical role
• Work Arrangement: Remote

Other Knowledge, Skills, and Abilities Required

• Proficient with QA methodologies, testing tools, and defect tracking/test management platforms (e.g., Jira, Azure DevOps, TestRail).
• Working knowledge of SQL for data validation and troubleshooting.
• Experience gathering and documenting business requirements and translating them into functional specifications and acceptance criteria.
• Experience coordinating small- to mid-size projects, including UAT cycles and release readiness.
• Cybersecurity experience is a plus — familiarity with security tooling (SIEM, vulnerability scanners, GRC/compliance platforms), security concepts (access control, audit logging, secure SDLC), or a compliance-driven environment.
• Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST is a plus.
• Strong written and verbal communication skills; comfortable working with both technical and non-technical stakeholders.
• Exceptional organizational and problem-solving skills, time management, and ability to prioritize deliverables.
• Requires regular interaction with internal senior leaders and cross-functional teams.

Join an award-winning company

Five-time winner of “Best in KLAS” 2020-2022, 2024-2025

Black Book Research's Top Revenue Cycle Management Outsourcing Solution 2021-2024

22 Healthcare Financial Management Association (HFMA) MAP Awards for High Performance in Revenue Cycle 2019-2024

Leader in Everest Group's RCM Operations PEAK Matrix Assessment 2024

Clarivate Healthcare Business Insights (HBI) Revenue Cycle Awards for strong performance 2020, 2022-2023

Energage Top Workplaces USA 2022-2024

Fortune Media Best Workplaces in Healthcare 2024

Monster Top Workplace for Remote Work 2024

Great Place to Work certified 2023-2024

• Innovation
• Work-Life Flexibility
• Leadership
• Purpose + Values

Bottom line, we believe in empowering people and giving them the tools and resources needed to thrive. A few of those include:

• Associate Benefits –  We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs. 
• Our Culture – Ensemble is a place where associates can do their best work and be their best selves. We put people first, last and always. Our culture is rooted in collaboration, growth, and innovation.  
• Growth – We invest in your professional development. Each associate will earn a professional certification relevant to their field and can obtain tuition reimbursement. 
• Recognition – We offer quarterly and annual incentive programs for all employees who go beyond and keep raising the bar for themselves and the company. 

Ensemble is an equal employment opportunity employer. It is our policy not to discriminate against any applicant or employee based on race, color, sex, sexual orientation, gender, gender identity, religion, national origin, age, disability, military or veteran status, genetic information or any other basis protected by applicable federal, state, or local laws.  Ensemble also prohibits harassment of applicants or employees based on any of these protected categories.

Due to business, operational, payroll, and regulatory requirements, this position is limited to individuals who reside and are authorized to work within the United States. Applications generated from outside the United States will not be considered.  Individuals may reapply when located within the United States.

Ensemble provides reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law. If you require accommodation in the application process, please contact [email protected].

This posting addresses state specific requirements to provide pay transparency.  Compensation decisions consider many job-related factors, including but not limited to geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; time in position.  A candidate entry rate of pay does not typically fall at the minimum or maximum of the role’s range.

Employment Disclaimers – Ensemble