Intermediate IT Security Analyst

Mentors clinical and business stakeholders on corporate security policies, standards, and state and federal regulations. Creates and conducts basic training plans for internal and external stakeholders. Analyzes processes to recommend improvements for increasing efficiency, quality, and compliance. Represents the IAM department in various meeting formats, including webex, conference calls, and face-to-face. Designs, implements, validates, and communicates changes with clinical, business, and IT application/system owners, vendors, and stakeholders according to processes, procedures, and service level agreements. Develops and maintains system design documentation and outlines build steps using appropriate tools. Leads simple to moderately complex projects, including formal project methodologies and development or changes to project scopes, schedules, and resources. Provides operational support for application security requests, incidents, and problems, resolving them appropriately and efficiently according to department processes, procedures, and service level agreements. Participates in on-call rotation for after-hours support and assists peers, as needed, to maintain technology systems and services. Implements standardized processes and procedures for requesting, approving, providing, and removing access to targeted AIT enterprise applications. Provides access using automated and manual processes with accuracy and efficiency, ensuring compliance with AIT and corporate policies, standards, and access models. Other duties as assigned. Monitors automated and manual access control reports, investigating and remediating any discrepancies.Knowledge, Skills, and Abilities

• Advanced knowledge of methods of access control to applications/systems, including role-based, rule-based, attribute-based, and management of exceptions. [Required]
• Supported at least three or more security platforms using various user interfaces. [Required]
• Aptitude to quickly learn new systems with little or no documentation. Continuous learning of new systems, business processes, and concepts. [Required]
• Proficient in Microsoft operating system and Office suite. [Required]
• Strong interpersonal skills with a positive and enthusiastic “can do” attitude. [Required]
• Comfortable working independently with general direction. [Required]
• Works well with people of varying levels of technical abilities. [Required]
• Excellent change management skills including troubleshooting, testing, and quality assurance. [Required]
• Strong oral and written communication, and time management skills. [Required]
• Create, maintain and communicate organized, complex documentation. [Required]
• Fundamental knowledge of programming and/or query languages. [Required]
• General awareness of security risk assessment process requirements. [Required]
• Proficiency in the utilization of technical or application tools to support security design, development, auditing, reporting, and support processes. [Required]
• Applies best practice techniques in troubleshooting, testing, and quality assurance. [Required]
• Knowledge of project management methodology. This will include all aspects such as stakeholder meetings, meeting minutes, business analysis, project planning, training, and implementation. [Required]
• Ability to travel occasionally as needed to support project implementation and assist with assessment of local workflow processes as needed. [Required]
• Application security training in team-specific software such as an (Electronic Medical Record) EMR solution (i.e., Cerner), Enterprise Resource Planning (ERP) solution (i.e., PeopleSoft), or major system architecture. [Preferred]
• Security requirements specific to Healthcare including HIPAA and HITECH and associated Risk Assessments. [Preferred]
• Security frameworks including HITRUST, ISO, NIST, or COBIT. [Preferred]
• Healthcare clinical or business knowledge such as inpatient or physician practice, human resources, finance, and/or supply chain. [Preferred]

Education:

• Bachelor’s [Required]
• Master’s [Preferred], * 2+ design and configuration experience in microsoft active directory, an emr solution (i.e. cerner), an erp solution (i.e. peoplesoft), or major system architecture. [Preferred]
• 2+ office 2010 or newer [Required]
• 2+ security account administration, access control design and/or build [Required]
• 2+ with account provisioning (i.e. microsoft active directory, multiple clinical/financial/business applications) and access request operations tasks experience [Preferred], * Certified Information Systems Auditor (CISA) [Preferred]
• Certified Information Security Manager (CISM) [Preferred]
• Certified Information Systems Security Professional (CISSP) [Preferred]

Pulled from the full job description

• 403(b)
• Paid parental leave
• Parental leave
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance, * Benefits from Day One: Medical, Dental, Vision Insurance, Life Insurance, Disability Insurance
• Paid Time Off from Day One
• 403-B Retirement Plan
• 4 Weeks 100% Paid Parental Leave
• Career Development
• Whole Person Well-being Resources
• Mental Health Resources and Support
• Pet Benefits

Joining AdventHealth is about being part of something bigger. It’s about belonging to a community that believes in the wholeness of each person, and serves to uplift others in body, mind and spirit. AdventHealth is a place where you can thrive professionally, and grow spiritually, by Extending the Healing Ministry of Christ. Where you will be valued for who you are and the unique experiences you bring to our purpose-minded team. All while understanding that together we are even better.