Cybersecurity & Incident Response Analyst

Mercy Health Corporation; Freeport (IL); On-site; USD 79,000 - 123,000; Full time

Benefits offered by this job

Medical, Dental, Vision

FSA/HSA Options

Paid time off

Job summary

Mercyhealth is seeking an Information Security professional to champion enterprise security processes and triage alerts across the MDR, CRI, and XDR stack. The role monitors malware, spyware, and spam systems, investigates incidents, and communicates security metrics and training across departments.

The ideal candidate has an associate's degree with 2+ years in IT operations or security, familiarity with ISO 27001/SOX/HIPAA/HITECH, and a preference for CompTIA Security+ or equivalent

Qualifications

• Associate's degree and a minimum of two years of professional work experience in IT operations or IT security role.
• Certifications (e.g., CompTIA Security+) preferred.
• 1+ years of experience in regulatory settings: ISO 27001, SOX, HIPAA, HITECH, CLIA, CAP desirable.

Responsibilities

• Serve as a champion for effective information security processes and behaviors across the enterprise.
• Triage information security alerts generated throughout the information security solution stack (i.e., MDR, CRI, XDR).
• Monitor systems that support the Mercyhealth information security posture; including malware detection, spyware/adware detection, and spam filtering to identify trends and risk.
• Investigate incidents and create accurate incident reports, escalating as necessary.
• Evaluate security notices from vendors and regulators; recommend precautions and track remediation.
• Develop, maintain, and communicate metrics to measure information security program effectiveness.
• Represent the information security program in meetings to inform, train and promote information security topics.

Skills

Effective communication

Critical thinking

Collaboration

Regulatory compliance

Attention to detail

Education

Associate's degree

2+ years IT/security experience

Tools

SIEM implementation

Azure

AWS

Job description

Mercyhealth is seeking an Information Security professional to champion enterprise security processes and triage alerts across the MDR, CRI, and XDR stack. The role monitors malware, spyware, and spam systems, investigates incidents, and communicates security metrics and training across departments.

The ideal candidate has an associate's degree with 2+ years in IT operations or security, familiarity with ISO 27001/SOX/HIPAA/HITECH, and a preference for CompTIA Security+ or equivalent