Information Security Analyst

Freeport Regional Healthcare Foundation dba FHN; Harlem (GA); On-site; USD 79,000 - 123,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life & Disability Insurance

FSA/HSA Options

Paid time off

Tuition and certification reimburse

Job summary

Mercyhealth is seeking an information security professional to champion security practices across the enterprise. The role involves triaging alerts, monitoring security systems, and investigating incidents to produce timely reports.

You will engage with regulators and vendors, developing metrics to show program effectiveness and supporting audit evidence as needed. Strong collaboration and communication are essential.

Qualifications

• Associates degree and 2+ years of IT operations or security experience.
• CompTIA Security+ or equivalent certification preferred.
• 1+ year in ISO 27001, SOX, HIPAA, HITECH, CLIA, CAP settings desirable.

Responsibilities

• Triage information security alerts across the enterprise.
• Monitor systems supporting Mercyhealth's security posture (malware, spyware, spam, etc.).
• Investigate incidents and prepare timely incident reports; escalate as needed.
• Review vendor advisories and security notices; recommend remediation steps.
• Develop, maintain, and communicate metrics for information security program effectiveness.
• Assist audits and respond to regulatory requests (SOC, HIPAA/HITECH).
• Evaluate systems for alignment with Mercyhealth security requirements.

Skills

SIEM implementation

Public/private cloud security

Information security

Critical thinking

Communication

Education

Associate degree

CompTIA Security+ or equivalent

Job description

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Serve as a champion for effective information security processes and behaviors across the enterprise.
• Triage information security alerts generated throughout the information security solution stack (i.e., MDR, CRI, XDR).
• Monitor systems that support the Mercyhealth information security posture; including, but not limited to, malware detection systems, spyware and adware detection systems, and spam filtering systems to identify trends and behaviors that increase risk.
• Investigate incidents and create accurate and timely incident reports, escalating to the appropriate persons as necessary.
• Evaluate bug reports, security exploit reports, and other security notices issued by vendors, manufacturers, government agencies, professional associations, and other organizations as needed, make recommendations to internal management and technical resources to take precaution steps and track remediation.
• Develop, maintain, and communicate key metrics to measure information security program effectiveness.
• Represent the information security program through attendance in departmental and team meetings throughout the enterprise to inform, train and promote information security topics.
• Assist in fulfilling evidence requests in response to regulatory compliance audits (i.e., SOC, HIPAA/HITECH).
• Evaluate acquired or developed systems and architectures to ensure alignment with Mercyhealth’s information security requirements.
• Conduct regular audits of information systems to ensure compliance with security policies and identify areas for improvement.
• Assess the security posture of third-party vendors providing products and services to the organization.
• Identify and develop content to support the information security awareness and training program.
• Serve as an active, supporting role to the Security Incident Response Team (SIRT) and participate in security incident response efforts.

CULTURE OF EXCELLENCE BEHAVIOR EXPECTATIONS

To perform the job successfully, an individual should demonstrate the following behavior expectations:

• Quality - Follows policies and procedures; adapts to and manages changes in the environment; Demonstrates accuracy and thoroughness giving attention to details; Looks for ways to improve and promote quality; Applies feedback to improve performance; Manages time and prioritizes effectively to achieve organizational goals.
• Service - Responds promptly to requests for service and assistance; Follows the Mercyhealth Critical Moments of service; Meets commitments; Abides by MH confidentiality and security agreement; Shows respect and sensitivity for cultural differences; and effectively communicates information to partners; Thinks system wide regarding processes and functions.
• Partnering - Shows commitment to the Mission of Mercyhealth and Culture of Excellence through all words and actions; Exhibits objectivity and openness to other's views; Demonstrates a high level of participation and engagement in day-to-day work; Gives and welcomes feedback; Generates suggestions for improving work: Embraces teamwork, supports and encourages positive change while giving value to individuals.
• Cost - Conserves organization resources; Understands fiscal responsibility; Works within approved budget; Develops and implements cost saving measures; contributes to profits and revenue.

EDUCATION & EXPERIENCE

Associates degree and a minimum of two years of professional work experience in IT operations or IT security role. Certifications (e.g., CompTIA Security+) preferred. 1+ years of experience working in at least one of the following regulatory settings: ISO 27001, SOX, HIPAA, HITECH, CLIA, CAP desirable. Knowledge of common security exploits, vulnerabilities, and countermeasures. Demonstrated ability to perform the Essential Duties of the position with or without accommodation. Authorization to work in the United States without sponsorship.

CERTIFICATION/LICENSURE

Information security or cyber security certification(s) is preferred.

ADDITIONAL REQUIREMENTS

• Passing the Driver’s License Check and/or Credit Check (for those positions requiring).
• Must be able to follow written/oral instructions.

OTHER SKILLS AND ABILITIES

• Demonstrate effective communication and a highly collaborative work ethic.
• Analyze, identify, and resolve problems using critical thinking.
• Demonstrates a sense of urgency and a commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
• Hands-on experience with SIEM implementation and administration.
• Information security in a public/private cloud infrastructure (Azure, AWS) environment.
• Completion or coursework toward information security certifications.

INFORMATION ACCESS

Partner may access patient care information, financial data, human resource data and strategic and planning data needed to perform their job duties as directed by the director.

WORK CONTACT GROUP

Partners, physicians, vendors

SPECIAL PHYSICAL DEMANDS

The Special Physical Demands are considered Essential Job Functions of the position with or without reasonable accommodations. While performing the duties of this job, the partner is regularly required to sit and use hands to finger, handle or feel. The partner is occasionally required to stand, walk, or reach with hands and arms; climb or balance and stoop, kneel, crouch, or crawl. The partner must occasionally lift and or move up to 25 pounds. Specific vision abilities required by this job include close vision and color vision.

LEVEL OF SUPERVISION

Requires minimal level of supervision.

SUPERVISES None.

PAY RANGE

$79,133.91 - $122,657.57

EEO STATEMENT

Mercyhealth is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identify, national origin, disability, or protected veteran status.

BENEFITS

• Medical
• Dental
• Vision
• Life & Disability Insurance
• FSA/HSA Options
• Generous, accruing paid time off
• Paid Parental and caregiver leave
• Career advancement and educational opportunities
• Tuition and certification reimbursement
• Certification Reimbursement
• Well-being Programs
• Employee Discounts
• On-Demand Pay
• Financial Education
• Annual recognition/awards events
• Partner appreciation days
• Family entertainment/attractions discount
• Community service/improvement opportunities

ABOUT US

At Mercyhealth, we don’t simply hire people, we empower employee-partners who are passionate about making lives better.

As an integrated health system, we deliver exceptional, coordinated across seven hospitals, 85 primary and specialty clinics, and a team of over 7,500 professionals serving northern Illinois and southern Wisconsin.

Mercyhealth has been nationally recognized for our commitment to our people and culture, including: #1 in the nation on AARP's Best Employers for Workers Over 50 One of Working Mother magazine's 100 Best Companies for Working Mothers A Top 50 Company and Top 10 Nonprofit for Executive Women

For over 135 years, Mercyhealth has provided high-quality health care to residents throughout northern Illinois and southern Wisconsin.

We have a passion for providing comprehensive health care close to home for area residents through our six hospitals and 85 primary and specialty care locations.

As an integrated health system, you can come to us for routine health care, like annual physicals, immunizations and preventive health screenings, as well as highly specialized care, such as neonatal intensive care, heart surgery, stroke care, neurosurgery, cancer treatment and much more. The range of Mercyhealth's specialties and the skills of our doctors, nurses and clinical staff are truly extraordinary.