LH
Senior GRC Analyst
Louisiana Health Service & Indemnity Company
Remote · United States
Louisiana Health Service & Indemnity Company
Louisiana Health Service & Indemnity Company - operating as Louisiana Blue - is the state's largest health insurer, an independent licensee of the Blue Cross and Blue Shield Association. Founded in 1934 by representatives of six area hospitals and headquartered in Baton Rouge, the company covers medical, dental, prescription drug, and Medicare Advantage plans across Louisiana. For a cybersecurity team, the attack surface is the full stack of protected health information: claims data, member PII, provider networks, and prescription histories flowing through systems that are subject to HIPAA, HITECH, and state-level insurance regulations. The threat model spans ransomware targeting healthcare delivery, credential-stuffing against member portals, supply-chain compromises in third-party benefits administration, and phishing aimed at employees handling sensitive claims data. Day-to-day, security operations here mean defending enterprise infrastructure and cloud environments in a heavily regulated vertical where a breach carries both federal enforcement action and direct reputational damage to the largest insurer in the state. The company emphasizes a collaborative work environment and ongoing professional development, and actively serves Louisiana communities - context that shapes both the organizational posture and the stakes of getting security right.
Louisiana Health Service & Indemnity Company - operating as Louisiana Blue - is the state's largest health insurer, an independent licensee of the Blue Cross and Blue Shield Association. Founded in 1934 by representatives of six area hospitals and headquartered in Baton Rouge, the company covers medical, dental, prescription drug, and Medicare Advantage plans across Louisiana.
For a cybersecurity team, the attack surface is the full stack of protected health information: claims data, member PII, provider networks, and prescription histories flowing through systems that are subject to HIPAA, HITECH, and state-level insurance regulations. The threat model spans ransomware targeting healthcare delivery, credential-stuffing against member portals, supply-chain compromises in third-party benefits administration, and phishing aimed at employees handling sensitive claims data.
Day-to-day, security operations here mean defending enterprise infrastructure and cloud environments in a heavily regulated vertical where a breach carries both federal enforcement action and direct reputational damage to the largest insurer in the state. The company emphasizes a collaborative work environment and ongoing professional development, and actively serves Louisiana communities - context that shapes both the organizational posture and the stakes of getting security right.