Cyber Security Specialist

Works under the supervision of the Applications Manager of Information Services. The Cyber Security Specialist plays a critical role in safeguarding the organization's information assets and maintaining a secure environment. The Cyber Security Specialist will be instrumental in identifying, assessing, and mitigating security risks while implementing best practices to ensure the confidentiality, integrity, and availability of the organization's data and systems. Performs other duties as assigned., The following is a summary of the major job duties of this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Conducts comprehensive security risk assessments of the organization's information systems, applications, and infrastructure.

2. Identifies potential vulnerabilities and recommends risk mitigation strategies.

3. Develops, updates, and enforces information security policies, procedures, and standards to maintain compliance with industry regulations and ensures data protection.

4. Responds promptly and effectively to security incidents, including conducting investigations, root cause analysis, and implementing corrective actions to prevent future occurrences.

5. Assists with internal and external security audits, ensuring adherence to regulatory requirements and industry best practices. Collaborates with auditors to provide evidence of security measures and controls.

6. Develops and delivers security awareness training programs for employees to promote a security-conscious culture and improve overall security awareness.

7. Collaborates with IT and development teams to evaluate the security implications of new systems, applications, and technology implementations. Ensures security is considered throughout the development lifecycle.

8. Conducts vulnerability assessments and manages the process of patching and remediating vulnerabilities across the organization's systems.

9. Monitors network traffic for suspicious activities and implements measures to prevent unauthorized access, intrusion, and data breaches.

10. Implements and manages data protection measures, including encryption, access controls, and data loss prevention (DLP) solutions.

11. Leads incident response efforts in the event of security breaches or cyber-attacks, coordinating with relevant teams and stakeholders.

12. Stays current with the latest cybersecurity threats and trends. Utilizes threat intelligence to enhance the organization's security posture.

• High School Diploma or successful completion of an equivalent High School Exam required.

• Bachelor's Degree in Computer Science, Information Security or related field preferred.

Licensure:

• CISSP, CISM, CEH, or CompTIA Security+ preferred.

Experience:

• Two years related work experience preferred.

• Familiar with regulatory requirements and frameworks (such as HITRUST, HIPAA, NIST, ISO 27001, etc.) requred.

• Experience with security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, antivirus, DLP, and endpoint security solutions required.

• Knowledge of network and system security, including authentication mechanisms, access controls, and encryption technologies required.

Pulled from the full job description 403(b) Health insurance Paid time off Employee discount Vision insurance Dental insurance Flexible spending account, * Competitive pay with quarterly market analysis

• Performance-based annual increase and bonus eligibility

• Up to 4% employer contributions to retirement plans (403(b) and Cash Balance Pension)

• Comprehensive medical, dental, and vision coverage*

• Medical and dependent care flexible spending accounts*

• Earned Wage Access - get paid before payday

• Paid Time Off bank with 3 annual sick days

• Life insurance and disability coverage*

• Tuition and certification assistance

• Club LC - discounted/free gym membership

• Employee discount and payroll deduct programs

• And many other benefit offerings!

• Available only to Full-Time and/or Part-Time Employees

Compensation & benefit eligibility is determined by employment status, position type, and hours worked. Offerings are subject to change and governed by SOMC's current plan documents and policies. Specific details will be reviewed upon hire as part of the onboarding process.

At Southern Ohio Medical Center, our mission is to make a difference in the community we serve. We're committed to delivering exceptional care and that starts with our team members. When you join SOMC, you're not just starting a job. You're joining a mission.