Information Security Analyst III (Remote) | $80/hr

Location: Remote
Duration: 3+ months
Pay Rate: $80/hr W2

The IS Analyst Security III is responsible for multiple day-to-day security tasks and various information security projects as part of supporting the organization’s information security needs. Day-to-day tasks include incident response, evaluation of requests for security changes, and monitoring of various security devices and audit logs. Responsibilities also involve providing ongoing support and counsel to IT staff and end users on a variety of security issues and ensuring the security policy and procedures are adhered to.

Essential Duties and Responsibilities

• In collaboration with infrastructure application teams and external department system administrators, implements and monitors organizational IT security policies and procedures, ensuring technical controls are enforced.
• Works with IT department managers and staff to ensure security issues are addressed as new equipment, facilities, systems, and software are installed.
• Develops processes for routine and requested internal audits of systems, applications, and data access including tools and techniques used to conduct audits.
• Conducts or coordinates audits on predefined schedule and when an audit is requested or indicated as part of an investigation.
• Documents audit findings and follows-up on access irregularities.
• Follows procedures and industry best practices for reporting and investigating IT related security incidents.
• Investigates and documents all reported or suspected security incidents. Maintains documentation of investigations and provides reports to the IT Director of Information Security.
• Recommends implementation of corrective actions needed to mitigate security vulnerabilities.
• In coordination with Network/Server and Applications, develops procedures and technical controls to monitor appropriate administrator, end-user, vendor, and remote access to the network, and IT systems.
• Investigates alerts to ensure that information is not altered or lost during storage, or transmission.
• Collaborates with the Project Management Office (PMO) on initiatives involving the IT Security program.
• Provide monthly metrics to the CISO and the IT Director of Information Security by the 3 rd business day of each month.
• Monitor and respond to help desk tickets within the documented Service Level Agreements (SLA).
• Maintain current documentation for all procedures and applications currently in use.
• Respond to all on-call notifications within required documented SLA’s.
• Responsible for periodically updating management, via written or verbal reports, on all issues, concerns, or problems related to the IT Security program.
• Monitors changes to applicable laws, industry standards, and regulatory or accreditation requirements, and incorporates requirements into the organization’s IT Security program.
• Plans and organizes time effectively. Integrate priority changes into work plans. Anticipates resource needs and plans accordingly.
• Other duties as assigned.

Minimum Qualifications Education and Experience

• Bachelor’s degree required or a minimum of 8-10 years of IT experience
• A minimum of four years’ experience in operational IT security
• Must have a CISSP and/or GIAC certification

Knowledge, Skills and Abilities

• Familiarity with regulations and compliance issues, preferably within the healthcare industry
• Demonstrated ability to drive multiple requirements across systems, users, and workflows
• Demonstrated ability to communicate with technical and non-technical stakeholders across the organization
• Expert level knowledge of IT Security tools and solutions
• Demonstrated ability to recognize and respond to alerts or other behaviors to quickly detect and mitigate potential threats
• Demonstrated ability to mentor, educate, and train other team members

Computers and Technology

• Familiarity with advanced networking concepts (i.e., TCP/IP)
• Strong understanding of Microsoft Windows desktop and server operating systems
• Familiarity with Linux operating systems
• Advanced knowledge of Web Security Solutions
• Advanced knowledge E-Mail Security Solutions
• Advanced knowledge of Security Incident Event Management (SIEM) systems
• Advanced knowledge of Vulnerability Management
• Advanced knowledge of security architecture including NIST, OWASP, etc.

Certificates, Licenses and Registration

• Either Certified Information System Security Professional (CISSP) or Global Information Assurance Certifications (GIAC) required.

Supervisory Responsibilities: This position has no supervisory responsibilities

#EP2