Cybersecurity Analyst (Remote)

Ohio Shared Information Services, Inc; Arizona; Hybrid; USD 75,000 - 115,000; Full time

Job summary

Ohio Shared Information Services, Inc is seeking an experienced Cybersecurity Analyst for a fully remote position supporting healthcare organizations. You will plan, implement, monitor, and enhance security controls to safeguard systems and patient data.

The role combines hands-on security work with risk management and compliance, conducting risk assessments, addressing vulnerabilities, supporting audits, and delivering training to PHCs and CHCs across the US.

Qualifications

• Bachelor's degree in computer science, programming, or a related field.
• MBA in Information Systems is preferred.
• At least three years of computer systems experience with a focus on information security.
• Relevant certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, or CRISC preferred.

Responsibilities

• Perform security risk assessments, audits, and testing to identify vulnerabilities.
• Develop and implement safeguards to protect information from unauthorized access or destruction.
• Monitor threats, vulnerabilities, and coordinate patches and updates.
• Implement and support security tools, including encryption and device management.
• Review incidents and provide training to prevent recurrence.
• Partner with PHCs to evaluate workflows and mitigate risks.
• Participate in state, local, and national collaborations for CHCs.

Skills

Security risk assessment

Vulnerability assessment

Communication skills

Education

Bachelor's degree in Computer Science, Programming, or related field

MBA in Information Systems (preferred)

Job description

Job Description: We are seeking an experienced Cybersecurity Analyst to help protect our organization and the healthcare organizations we support from evolving security risks. In this fully remote position, you will help plan, implement, monitor, and enhance security controls designed to safeguard computer systems, networks, and sensitive information. This role combines hands‑on cybersecurity work with security risk management and healthcare compliance. You will conduct risk assessments, identify and address vulnerabilities, support security audits, implement security controls, and provide guidance and technical assistance to participating health centers (PHCs). You will also help ensure security practices align with applicable industry standards and federal healthcare regulations.

What You'll Do

• Perform security risk assessments, audits, and testing to identify vulnerabilities and areas of concern.
• Develop and implement safeguards to protect sensitive and confidential information from unauthorized access, modification, disclosure, or destruction.
• Monitor security threats and vulnerabilities and coordinate necessary application and system updates.
• Implement and support security tools and controls, including data encryption, application patching, and device management.
• Research and deploy CIS security benchmarks.
• Review security incidents and procedural violations and provide education to help prevent recurrence.
• Monitor and restrict access to sensitive and high-security information.
• Partner with users and stakeholders to evaluate workflows, identify security risks, and recommend improvements.
• Promote cybersecurity awareness and provide security‑related training.
• Serve as a Security Risk Assessment resource for PHCs, providing training and technical assistance.
• Assist PHCs with mitigation plans for areas of concern identified through security risk assessments.
• Participate in state, local, and national collaborations supporting community health centers (CHCs), including peer collaboration groups.

What We're Looking For

• Bachelor's degree in Computer Science, Programming, or a related field required.
• An MBA in Information Systems is preferred.
• At least three years of computer systems experience, preferably with a specialization in information security.
• Relevant cybersecurity, compliance, or risk‑management certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, or CRISC are preferred.
• Strong technical knowledge with the ability to evaluate security threats, vulnerabilities, and controls.
• Excellent problem‑solving, communication, customer service, and collaboration skills.
• Ability to work effectively in a remote environment while managing multiple priorities.

Preferred Experience

• Ideal candidates will bring experience in one or more of the following areas:
• Implementing technical security controls within a healthcare environment.
• Developing and implementing Security Risk Management programs.
• Translating cybersecurity regulations and frameworks into practical risk‑assessment processes and tools.
• Developing and evaluating technical and process‑based security controls.
• Managing security risk assessments and investigations.
• Working with frameworks, regulations, and certifications such as HIPAA, HITECH, PCI, SOX, SOC 1 & 2, ISO, and Meaningful Use/Promoting Interoperability.
• Working directly within the healthcare industry.

Work Environment

This is a fully remote position with limited travel of less than 10%. The role is primarily computer‑based and requires prolonged periods of sitting and working at a computer. Occasional evening or weekend work may be necessary based on business needs or project demands.

Compensation Range

$75,000 - $115,000

OSIS celebrates Best Places to Work through Cincinnati Business Courier 2024. Welcome to OSIS Careers! OSIS is a non‑profit technology services organization dedicated to providing expert NextGen Healthcare technology assistance exclusively to Community Health Centers across the US. Over 30 million people in the US rely on government‑funded health center care. Our mission is to unlock the potential of technology to positively advance the outcomes of modern age community healthcare.