Security Analyst

The Security Analyst will play an essential role in safeguarding sensitive member and organizational data against cyber threats. The Security Analyst’s primary objective will be to lead information security investigations, ensure compliance with healthcare regulations and enforcement of internal information security policies. The Security Analyst will collaborate closely with IT teams and security stakeholders to implement robust information security measures and continuously improve the organization’s information security posture. This role demands a proactive approach to identifying vulnerabilities and mitigating risks to protect the organization and maintain trust with members and partners. Ultimately, the Information Security Analyst’s efforts will contribute to a secure and resilient healthcare environment that supports uninterrupted delivery of essential services., * Demonstrate commitment to Our Mission and models ILS Experience Standards of Excellence.

• Monitor security alerts and analyze potential threats using tools such as Crowdstrike and Obsidian to identify vulnerabilities and intrusions.
• Guide incident response efforts by investigating security breaches, coordinating containment, eradication, and recovery activities.
• Develop, update, and enforce security procedures and protocols aligned with healthcare industry standards and regulatory requirements.
• Conduct regular vulnerability assessments to enhance detection capabilities and reduce false positives.
• Collaborate with external information security teams to share intelligence, coordinate responses, and implement best practices across the organization.
• Perform other duties as assigned.

Do you have experience in Regulatory compliance?, Do you have a Bachelor’s degree?, * Bachelor’s degree in Computer Science, Information Security, or a related field.

• 3 years of experience in an information security role.
• Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Experience with security monitoring tools such as SIEM, IDS/IPS, and endpoint protection platforms.
• Strong understanding of intrusion detection systems and network security principles.
• Familiarity with healthcare industry regulations such as HIPAA and related security compliance requirements.
• Relevant experience may substitute for educational requirement on a year-for-year basis., * Professional certifications such as CISSP, CISM, or GIAC Security Essentials (GSEC).
• Experience working in a healthcare or social assistance environment with exposure to global security frameworks.
• Advanced knowledge of scripting or automation tools to streamline security operations.
• Experience with cloud security and securing hybrid IT environments.
• Strong communication skills to effectively liaise with technical teams and non-technical stakeholders.