IT Security Analyst IV

This position is a lead security analyst within IT Security Governance and IT Security Operations. The incumbent will be responsible for the administration, monitoring, maintenance, and continuous improvement of numerous critical security technologies. In addition to maintaining day-to-day cybersecurity operations, the team is responsible for several enterprise-wide strategic initiatives,

What You’ll Do

IT Security Operations:

• Recommend FireWall change requests for approval
• Analyze and take appropriate action on intrusion detections
• Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance
• Review and approve access requests
• Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles
• Map work flows in provisioning users into our systems and infrastructure
• Comply with internal and external audit requests
• Monitor the effectiveness of the Enterprise wide information security program
• Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations
• Participate in investigating possible security violations
• Track and maintain operational security access metrics

IT Security Governance:

• Design workflow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information
• Provide guidance and direction regarding security control elements in policies throughout the organization
• Document relevant business processes and their implications on information security
• Develop information security risk identification, tracking and mitigation processes strategy and methodology
• Develop the information security awareness, training and education program-s strategy and methodology
• Facilitate or lead development of accurate and relevant information security process and operational metrics
• Establish monitoring measures to detect and ensure correction of security breaches and policy violations
• Proactively keep current on information security issues related to business processes as input into departmental policies and procedures
• Analyze and enhance the effectiveness of the Enterprise wide information security program., * Perimeter Defense
• Palo Alto Networks (PAN) Firewalls)
• Prisma GlobalProtect VPN
• Cisco Sourcefire
• Cisco Stealthwatch
• Cisco Identity Services Engine (ISE)
• Secure Mail Gateway (ProofPoint)
• Enterprise Proxy
• Endpoint and Data Protection
• Endpoint Protection Platforms
• Data Loss Prevention (DLP)
• File Integrity Monitoring (FIM)
• Absolute/Computrace
• Vulnerability Scanning Platforms
• Disc Encryption
• EDR (Crowdstrike)
• Application and Cloud Security
• Web Application Firewall (WAF)
• Secure Proxy Services
• Zscaler
• Application Security Programs
• Cloud Access Security Broker (CASB)
• Cloud Security Controls
• Security Operations
• Security Information and Event Management (SIEM)
• Security Monitoring and Alerting
• Incident Response Activities
• Threat Detection and Vulnerability Management

• Minimum high school diploma or GED
• Requires Bachelor’s degree, preferably in Computer Science, from an accredited college or university
• Prefers advanced degree in Information Security, Computer Science or related field
• 5 years prior IT security related work experience
• Experience with IDS, IPS, ICE Engine or

Additional licensing, certifications, registrations:

• Requires one or more of the following certifications: CISSP, SANS GIAC or CISA

Knowledge:

• Requires an excellent understanding of IT security concepts with an emphasis on Security and Risk Assessment
• Microsoft 365 security implementation and ongoing support
• Micro-segmentation initiatives to reduce lateral movement risks
• AI performance, governance, and security controls
• Data classification and sensitive data protection initiatives
• Cloud security enhancements
• Continuous vulnerability remediation efforts
• Security architecture improvements aligned with organizational objectives

At Horizon, you’ll do meaningful work that directly improves lives-while being supported by a mission-driven organization that values expertise, collaboration, and growth. We believe that when our people thrive, our communities do too. If you are passionate about making an impact, we’d love to hear from you!

Salary Range: $97,800 - $133,455

This compensation range is specific to the job level and takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to: education, experience, licensure, certifications, geographic location, and internal equity. This range has been created in good faith based on information known to Horizon at the time of posting. Compensation decisions are dependent on the circumstances of each case. Horizon also provides a comprehensive compensation and benefits package which includes:

• Comprehensive health benefits (Medical/Dental/Vision)
• Retirement Plans
• Generous PTO
• Incentive Plans
• Wellness Programs
• Paid Volunteer Time Off
• Tuition Reimbursement

Horizon Blue Cross Blue Shield of New Jersey empowers our members to achieve their best health. For over 90 years, we have been New Jersey’s health solutions leader driving innovations that improve health care quality, affordability, and member experience. Our members are our neighbors, our friends, and our families. It is this understanding that drives us to better serve and care for the 3.5 million people who place their trust in us. We pride ourselves on our best-in-class employees and strive to maintain an innovative and inclusive environment that allows them to thrive. When our employees bring their best and succeed, the Company succeeds.