Cybersecurity Analyst

phigroup; Tempe (AZ); On-site; USD 70,000 - 110,000; Full time

Job summary

PHI Health in Tempe, AZ seeks a Cybersecurity Analyst to support governance, policy administration, risk management, compliance coordination, and third-party reviews across healthcare, aviation, and corporate operations.

You will help maintain regulatory documentation, drive security awareness campaigns, and track metrics, dashboards, and audits, collaborating with IT and business teams to mature the organization's cybersecurity posture.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience.
• One to three years of experience

Responsibilities

• Coordinate and maintain enterprise cybersecurity governance program.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Coordinate periodic policy reviews to ensure documentation remains current and aligned with regulatory and business requirements.
• Maintain the enterprise cybersecurity risk register and track mitigation activities through completion.
• Perform cybersecurity reviews for new technologies, software solutions, AI tools, and business initiatives using risk assessment processes.
• Coordinate third-party security assessments and vendor cybersecurity reviews.
• Assist with HIPAA Security Rule, NIST Cybersecurity Framework, and other regulatory or contractual compliance activities.
• Coordinate cybersecurity evidence collection for internal and external audits and cyber insurance renewals.
• Administer the enterprise cybersecurity awareness program, including KnowBe4 campaigns and phishing simulations.
• Track cybersecurity metrics and prepare executive dashboards and management reports.

Education

Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience

Job description

Analyst, Cybersecurity

Join Our Life-Saving Team!

Are you ready to elevate your career to new heights? PHI Health is looking for dynamic, driven individuals to join our team. We are committed to providing top-tier emergency medical services with unmatched speed and efficiency, saving lives when every second counts. By supporting our mission from the ground, you will play a crucial role in orchestrating the seamless operations that keep our advanced fleet soaring and our patients safe.

With PHI Health you'll collaborate with the best minds in the industry, driving initiatives that enhance our services and expand our reach to those who need it most. If you're passionate about making a difference and thrive on challenges, PHI Health offers an extraordinary opportunity to impact lives and develop your professional career in a meaningful way.

Who We Are:

PHI Health is the leading air ambulance provider in the United States. With an unmatched safety record and the best aviation, medical and communication specialists in the field, we set the standard in the air medical industry. We transport more than 22,000 patients each year from our more than 80 bases across the country, all while offering services and outreach education to local communities and leading healthcare systems. Our mission is simple: move communities to health while maintaining the highest standard of safety, period.

Job Summary:

The Cybersecurity Analyst is responsible for supporting the organization’s cybersecurity governance program through policy administration, risk management, security awareness, compliance coordination, third‑party risk assessments, cybersecurity metrics, and operational program management. This position ensures cybersecurity processes remain organized, documented, measurable, and aligned with organizational standards while supporting technical cybersecurity initiatives. The Cybersecurity Analyst works across Information Technology and business departments to coordinate security activities, maintain regulatory documentation, and improve organizational cybersecurity maturity across healthcare, aviation, and corporate operations.

Responsibilities Include:

• Coordinate and maintain the enterprise cybersecurity governance program.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Coordinate periodic policy reviews to ensure documentation remains current and aligned with regulatory and business requirements.
• Maintain the enterprise cybersecurity risk register and track mitigation activities through completion.
• Perform cybersecurity reviews for new technologies, software solutions, AI tools, and business initiatives using established risk assessment processes.
• Coordinate third‑party security assessments and vendor cybersecurity reviews.
• Assist with HIPAA Security Rule, NIST Cybersecurity Framework, and other regulatory or contractual compliance activities.
• Coordinate cybersecurity evidence collection for internal audits, external audits, cyber insurance renewals, and customer security questionnaires.
• Administer the enterprise cybersecurity awareness program, including KnowBe4 campaigns, phishing simulations, and user education initiatives.
• Track cybersecurity metrics and key performance indicators and prepare executive dashboards and management reports.
• Coordinate Cybersecurity Council meetings, document action items, and track completion of assigned tasks.
• Maintain cybersecurity documentation, including inventories, exception registers, standards, and supporting records.
• Support incident response activities through documentation, communications, lessons learned, and corrective action tracking.
• Assist in coordinating tabletop exercises, business continuity planning, and disaster recovery testing.
• Monitor cybersecurity project milestones and ensure governance deliverables are completed on schedule.
• Assist in developing cybersecurity communications, awareness materials, newsletters, and organizational guidance.
• Maintain inventory of cybersecurity tools, licensing, subscriptions, and service contracts.
• Support annual cybersecurity program reviews and continuous improvement initiatives.
• Perform other cybersecurity administrative and operational duties as assigned.

PRIMARY FUNCTIONAL OWNERSHIP

• Cybersecurity Policies & Standards
• Governance Documentation
• Cybersecurity Risk Register
• AI Risk Intake Assessments
• Third-Party Risk Reviews
• Vendor Security Questionnaires
• Security Awareness Program
• KnowBe4 Administration
• Cyber Insurance Evidence
• Audit Coordination
• NIST Framework Tracking
• HIPAA Security Documentation
• Cybersecurity Metrics & DashboardsCybersecurity Council Administration
• Business Continuity Documentation
• Security Program Reporting

The Successful Candidate Will Have:

• Education

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience.

Experience

• One to three years o