ZipRecruiter

Log In

1

Hitrust Jobs in New York (NOW HIRING)

MedReview

Data Engineer

Manhattan, NY · Remote

$105K - $115K/yr

Ensure all data structures and processes adhere to HITRUST/HIPAA standards, collaborating with IT and the leads for technical efforts for HITRUST certification readiness. Required Skills & Experience

Forus Inc

Security Operations Lead

New York, NY · On-site

You will own our compliance programs end to end - SOC 2, HIPAA, and HITRUST - and build the customer trust function that ensures security remains a core competency at Forus. You will run vendor and ...

Hightop Health LLC

Director of Technology

New York, NY · On-site

$175K - $225K/yr

HIPAA compliance including SOC2 Type 2 readiness/certifications and any HITRUST initiatives. * Security governance including policy development and enforcement * Vendor risk management. * Audit ...

next page

Showing results 1-20

All JobsHitrust JobsHitrust Jobs in New York

Hitrust information

See New York salary details

$78.2K

$133.8K

$198.4K

How much do hitrust jobs pay per year?

As of Jul 26, 2026, the average yearly pay for hitrust in New York is $133,809.00, according to ZipRecruiter salary data. Most workers in this role earn between $106,593.00 and $160,164.00 per year, depending on experience, location, and employer.

Is cybersecurity a dying field?

Cybersecurity professionals, including those working with HITRUST compliance, are in high demand due to increasing cyber threats and data protection regulations. The field is expected to grow steadily as organizations prioritize security, requiring skills in risk management, threat detection, and security frameworks. Continuous learning and certifications like CISSP or CISA enhance job prospects in this evolving industry.

What are the key skills and qualifications needed to thrive in the Hitrust position, and why are they important?

To thrive in a HITRUST professional role, you need a robust understanding of information security, healthcare compliance, and risk assessment, typically supported by a relevant degree or certifications such as HITRUST Certified CSF Practitioner (CCSFP). Proficiency with regulatory frameworks like HIPAA, GRC tools, and HITRUST’s MyCSF platform is crucial. Strong attention to detail, analytical thinking, and effective communication are key soft skills for working with cross-functional teams and translating complex requirements. These skills enable professionals to ensure organizational compliance, manage complex security assessments, and foster trust in healthcare data protection programs.

What jobs in the US pay $300,000 a year?

High-paying jobs that can reach or exceed $300,000 annually include roles such as senior cybersecurity professionals, chief information security officers, and IT directors, especially in large organizations. These positions often require extensive experience, advanced certifications like CISSP or CISM, and leadership responsibilities within cybersecurity or technology departments.

What typical responsibilities can I expect as a HITRUST professional in a healthcare organization?

As a HITRUST professional, you will be responsible for guiding organizations through the HITRUST CSF certification process, conducting comprehensive risk and gap assessments, and creating remediation plans to address compliance issues. Your work will often involve collaborating with IT, compliance, and executive teams to implement policies, improve security controls, and ensure adherence to industry standards like HIPAA and HITECH. You can also expect to manage regular audits, prepare documentation, and educate staff on emerging security requirements. This role plays a key part in maintaining regulatory compliance and safeguarding sensitive patient data.

What is a HITRUST job?

A HITRUST job typically involves working with the HITRUST Common Security Framework (CSF) to help organizations achieve and maintain regulatory compliance, data security, and risk management. Professionals in this role may conduct risk assessments, implement security controls, and guide organizations through the HITRUST certification process. Common job titles include HITRUST Consultant, Compliance Analyst, and Security Auditor. These roles require expertise in cybersecurity, regulatory frameworks, and industry best practices.

How much do HITRUST analysts make?

HITRUST analysts typically earn between $70,000 and $110,000 annually, depending on experience, certifications, and location. They often work with compliance frameworks, security assessments, and risk management tools in healthcare or cybersecurity environments.
What are the most commonly searched types of Hitrust jobs in New York? The most popular types of Hitrust jobs in New York are:
What are popular job titles related to Hitrust jobs in New York? For Hitrust jobs in New York, the most frequently searched job titles are:
What job categories do people searching Hitrust jobs in New York look for? The top searched job categories for Hitrust jobs in New York are:
Hitrust jobs near you
Infographic showing various Hitrust job openings in New York as of July 2026, with employment types broken down into 90% Full Time, and 10% Contract. Highlights an 90% In-person, and 10% Remote job distribution, with an average salary of $133,809 per year, or $64.3 per hour.
Lead IT Security Analyst - HIPAA, HITRUST, FISMA

Lead IT Security Analyst - HIPAA, HITRUST, FISMA

NYU Langone Health

Manhattan, NY

Full-time

Posted 24 days ago

NYU Langone Health rating

8.5

Company rating: 8.5 out of 10

Based on 247 frontline employees who took The Breakroom Quiz

16th of 890 rated healthcare providers

Job description

NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News & World Report recently placed nine of its clinical specialties among the top five in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.
For more information, go to NYU Langone Health, and interact with us on LinkedIn, Glassdoor, Indeed, Facebook, Twitter, YouTube and Instagram.

Position Summary:
We have an exciting opportunity to join our team as a Lead IT Security Analyst.
This position reports to the IT Controls & Regulatory Compliance Manager and serves as a senior individual contributor and subject matter expert responsible for leading enterprise risk assessments and evaluating the security of modern technology environments, including cloud-based platforms. 
The IT Controls Lead drives the design, execution, and continuous improvement of the organizations risk assessment program to ensure compliance with regulatory and industry requirements, including HIPAA, HITRUST, PCI DSS, and FISMA.
This role partners closely with IT, Security, Clinical, Research, and Compliance stakeholders to assess risk across enterprise systems, research technologies, and cloud infrastructure, and to ensure that security controls are appropriately designed and operating effectively.

Job Responsibilities:

Enterprise Risk Assessment Leadership 

  • Lead the execution and maturation of the enterprise risk assessment program aligned to regulatory and industry frameworks  
  • Conduct and oversee complex risk assessments, including HIPAA and HITRUST-aligned evaluations  
  • Define and maintain risk assessment methodologies, scoring models, and standards  
  • Identify, analyze, and document risks, and develop actionable remediation strategies 

Cloud Security & Technology Risk Evaluation 

  • Lead security assessments of cloud and hybrid environments (e.g., IaaS, PaaS, SaaS)  
  • Evaluate key control domains, including:  
  • Identity and access management  
  • Network architecture and segmentation  
  • Logging, monitoring, and detection capabilities  
  • Data protection and encryption  
  • Assess alignment to frameworks such as:  
  • HITRUST 
  • PCI 
  • NIST Cybersecurity Framework  
  • ISO/IEC 27001  
  • Partner with engineering and security teams to validate that controls are effectively implemented in real-world environments 

What NYU Langone Health employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply