Job Description

 Summary: The HIT Department is seeking an Information Security Analyst to support operations of enterprise security through policy, security event monitoring, management and response, assisting in the selection and implementation of appropriate security solutions, and other tasks as assigned. Duties and Responsibilities:  Primarily responsible for security event monitoring, management and response.  Responsible for the technical support and response during Security Systems Audits.  Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.  Revise and develop processes to strengthen the current Security Operations Framework.  Perform threat management, threat modeling, threat vector identification and develop use cases for security monitoring.  Responsible for the completion of post mortem analysis, documentation of findings and provide recommendations to the appropriate security and infrastructure teams.  Responsible for refining the processes that enables events to quickly and accurately be classified, prioritized and escalated appropriately when necessary.  Creation of reports, dashboards, metrics for Security Operations.  Educate and explain applicable policies and procedures based on existing circumstances  Foster innovation, creativity, collaboration and maturity of the Security Operations and its processes.  Responsible for writing Security Operations policies and procedures; as well as responding to planned partner security compliance surveys.  Experience in fast‐paced highly regulated environment such as healthcare or financial is a plus.  Other duties as assigned. Knowledge, Skills and Minimum Job Requirements:  5+ years in an Information Technology Security role  3+ years demonstrated detailed analysis Information Security role  3+ years demonstrated enterprise network experience in a Security role  Solid understanding of security for LAN/WAN protocols, platforms and devices such as o365, AWS, firewalls, servers, routers, and switches  In‐depth knowledge of domain structures, user authentication and authorization, encryption and digital signatures and networking.  Knowledge of the security requirements for HIPAA, HITECH, iso 27001/27002, and SOX regulations  In‐depth knowledge of security concepts such as cyber‐attacks and techniques, threat vectors, incident management, etc.  Proficient in Incident Management, Response and preparation of reports, dashboards, and documentation  Experience with providing overall direction during execution of the incident response process, providing advanced analysis and detection  Excellent analytical, problem solving, communication, and interpersonal skills  Experience with MS office, PowerPoint, Visio, project management tools and Excel  Ability to work independently with minimal direction and supervision in a fast‐paced environment  Strong, problem‐solving, mentoring, verbal and written communication, and interpersonal skills  Ability to handle multiple initiatives simultaneously