Information Security Analyst I

Laboratory Sciences of Arizona; Phoenix (AZ); On-site; USD 80,000 - 110,000; Full time

Job summary

Laboratory Sciences of Arizona in Phoenix is seeking a dedicated IT professional to lead the threat and vulnerability management program. The role focuses on implementing security policies, auditing controls, and supporting incident response within a healthcare environment.

You will work with cross-functional teams to strengthen information security across applications and networks, aligning with regulatory requirements and industry best practices.

Qualifications

• Associates degree in information security or related field, or equivalent education/experience.
• At least 1 year of IT, information security, compliance, or risk management experience.
• Within 1 year, obtain CISSP/SSCP/HCISSP/PCI-ISA/CompTIA Security+ or equivalent certification.
• Strong communication and presentation skills across technical and non-technical audiences.

Responsibilities

• Implement information security policies, standards, and procedures across systems and networks.
• Audit user access, security logs, and permissions; maintain documentation.
• Monitor SOC communications and support incident investigations.
• Maintain IT controls and collaborate across facilities.

Skills

Incident management

Root cause analysis

Change control

Policy development

Communication skills

Education

Associate degree in Information Security or related field

Tools

Palo Alto

SIEM

Windows

Job description

Primary City/State:Phoenix, ArizonaDepartment Name:IT Threat & Vulnerability MgmtWork Shift:DayJob Category:Information TechnologyJoin one of Arizona's leading diagnostic labs at Sonora Quest, where your work directly supports life-saving medical testing and patient care. Whether you're beginning your lab career or bringing experience to the table, this role offers hands-on impact and career growth in a high-demand healthcare setting. Come do great work on behalf of better health!POSITION SUMMARYThis position is responsible for implementation of information security policies, standards, and procedures on all organizational information systems. This position is also responsible for auditing user access, security logs and user permissions. Duties include developing security processes, participating in security investigations, and maintaining documentation. This position supports and maintains the information security infrastructure, including both applications and networking components. This position performs ticket focused tactical incident support, monitors Security Operation Center (SOC) communications and audits Information Technology (IT) controls.Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards.KNOWLEDGE, SKILLS AND ABILITIESReceptive to learning and mentoringActively completes routine tasks of moderate complexity and small scopeDemonstrates competency in appropriate range of technical skillsUnderstands incident management, root cause analysis and change control processRefers to and applies appropriate documentation and Knowledge BasesStrong verbal/written communication skillsExcellent interpersonal skillsTroubleshooting and complex problem-solving abilityGood judgement and decision-making abilityEffective time management skillsProject management and organizational skillsMINIMUM QUALIFICATIONSAssociates degree in Information Security, Computer Information Systems, or another relevant field, or have equivalent education and experience.One (1) year of relevant experience of any combination of IT, Information Security, Compliance, or Risk Management experience.Certification in one of the following areas within in one year of entering the position: Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), HealthCare Information Security & Privacy Practitioner (HCISSP), Payment Card Industry - Internal Security Assessor (PCI-ISA), CompTIA Security+, HIPAA Security, Information Security Technology Fundamentals, Internet Security or ITAA Information Security Awareness.Must demonstrate general knowledge of information technology and healthcare.Needs experience in small scale project planning and reporting either individually or in a team.Requires communication and presentation skills to engage technical and non-technical audiences.Requires ability to communicate and interact across facilities and at various levels. As is typical in this industry, variable shifts and hours and carrying/responding to cell phone may be required.PREFERRED QUALIFICATIONSPalo Alto and endpoint product experienceFirewalls, Network-based Intrusion Prevention System (NIPS), and web filter experienceVulnerability scanning and patch management experienceSecurity Information and Event Management (SIEM) experienceWindows & Linux experienceHIPAA, PCI-DSS, or previous healthcare experienceSecurity+, GIAC Security Essentials (GSEC), Associate of (ISC)2, CompTIA A+ and/or Network+ certification and trainingAdditional related education and/or experience.EEO Statement:EEO/Disabled/VeteransOur organization supports a drug-free work environment.Privacy Policy:Privacy Policy