Information Security Analyst

At the company, our work helps hospitals recover the revenue they've earned so they can continue serving patients and communities. Trusted by more than 1,300 hospitals across 48 states, we combine specialized expertise with proprietary technology to solve problems others can't. Just as importantly, we've built a workplace where people support one another, embrace innovation, and are trusted to do their best work.

[[link for members]

Position Summary

This position is responsible for maintaining the security and integrity of all data at the company. The primary functions within the position is to keep an ongoing analysis of current security measures, determine their effectiveness, as well as, suggest and implement improvements to mitigate risk. The information security analyst will be responsible for implementation of security measures for systems within the company environment. Reporting to the Director of Enterprise Technology Services, the Security Analyst will work closely with teams across all threads where security applies within the organization.

Key Responsibilities

• Ensure that the company assets and electronic data are adequately protected

• Work closely with Compliance Officer, Privacy Officer, Security Officer and CIO to understand the company security and privacy goals

• Proactively develop, obtain approval, and implement information security projects that further protect the company’s sensitive information

• Perform information security audits as assigned and document results.

• Ensure all audits are performed per the schedule, review results and escalate issues / exceptions as needed

• Fulfill any IT security/risk training initiatives to employees throughout the organization.

• Provide assistance with information security questionnaires (received from our clients) and send to Compliance Committee for final review

• Participate on client calls on information security topics

• Investigate, assess, document and remediate any type of security breach or cyber security incident.

• Work with Systems Administrators to uncover undiscovered internal/external vulnerabilities

• Fix discovered vulnerabilities to maintain high security standard.

• Expand and enforce company-wide best practices for IT security.

• Research security enhancements and make recommendations to management team.

• Implement and maintain robust SEIM architecture.

• Keep up to date with IT trends and security standards.

• Serve as project manager/lead within IT security projects.

• Work closely with Systems Administration team to complete department projects, goals and objectives

This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Employees may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation.

Education/Licensing/Certifications

• Bachelor’s degree in computer science, cyber security or a related discipline.

• Industry certifications a plus (CISSP), (CISM), (CISA) (GIAC) Certified in Risk and Information Systems Control, Certified Ethical Hacker

Work Experience & Skills

• Microsoft 365 Security (Microsoft identity and access management (IAM), Microsoft threat protection, Microsoft Information Protection (MIP), Microsoft 365 security and risk management, etc.)

• IDS/IPS systems, SIEM tools and network scanners

• Access control methodologies (RBAC)

• Identity and access management

• Penetration testing of applications and infrastructure

• Social engineering

• Vulnerability and risk assessment

• Security assessments of network infrastructure, virtual infrastructure and applications

• Information Forensics

• Troubleshooting

• DLP, AV and anti-malware

• TCP/IP, computer networking, routing and switching

• Cloud computing

• Windows, UNIX and Linux operating systems

• Excellent report writing and communication

• The ability to work well independently or with a team

• Available to travel

• Capable of meeting deadlines and budgets

Work at Home requirements

• A quiet, distraction-free environment to work from in your home.

• A secure internet connection is required.

• Home internet with speeds >20 Mbps for downloads and >10 Mbps for uploads.

• The workspace area accommodates all workstation equipment and related materials and provides adequate surface area to be productive.

Must reside in the United States within one of the states listed below:

Alabama, Arkansas, Delaware, Florida, Georgia, Illinois, Iowa, Indiana, Kansas, Kentucky, Louisiana, Massachusetts, Maine, Michigan, Minnesota, Missouri, Mississippi, North Carolina, Nebraska, New Hampshire, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota (CST Time Zone), Tennessee, Texas (CST Time Zone), Vermont, Virginia, Wisconsin, and West Virginia

The company is an Affirmative Action/Equal Opportunity Employer committed to providing equal employment opportunities for all applicants and employees. We make employment decisions without regard to any characteristic protected by applicable law and encourage individuals of all backgrounds to apply.

Employment is contingent upon eligibility to work in the United States, verification of employment history, and successful completion of a background check.