Information Security Analyst I — Cyber Defense

El Rio; Tucson (AZ); Hybrid; USD 71,000 - 114,000; Full time

Job summary

El Rio Health is seeking an IT - Information Security Analyst I at Manning - Information Systems Info Security in Tucson, AZ. The role focuses on planning, design, and implementation of security controls to protect data confidentiality, integrity, and availability.

Responsibilities include risk assessments, monitoring for threats, and advising stakeholders on security measures. A bachelor’s degree and Security+ or equivalent certification are preferred; 5+ years of relevant experience is welcome.

Qualifications

• Associates degree in IT or related field plus 5 years of experience.
• CompTIA Security+ or equivalent certification required.
• Ability to explain technical concepts to non-technical stakeholders.

Responsibilities

• Reviews and performs basic to moderately complex security procedures.
• Identify policy gaps and contribute to security policy updates.
• Conduct risk assessments and monitor threats.
• Analyze network traffic for anomalies and threats.
• Communicate security information to staff and clients.
• Assist in evaluating new IT solutions for security compliance.

Education

Bachelor’s Degree in Information Technology or Information Security

Security certifications (CISA, CISM, GIAC, CISSP)

5+ years of relevant work experience

Tools

CompTIA Security+

Job description

The Information Security Analyst I is an information security professional responsible for comprehensive planning, design, evaluation, and implementation of security procedures which safeguard the confidentiality, integrity, and availability of systems and data.

Essential Job Functions:

• Reviews and performs basic to moderately complex procedures necessary to ensure the safety of information and to protect systems from intentional or inadvertent access, modification, disruption, or destruction.
• Recognizes and identifies potential areas where existing data security policies and procedures require change, or where new policies and procedures need to be developed related to firewalls, intrusion detection, vulnerability scanning, host operating systems, or network devices.
• Performs and contributes to risk assessments.
• Maintains awareness of emerging threats and trends within Information Security.
• Acts as a trusted advisor to clients/staff about information security.
• Characterizes and analyzes network traffic to identify anomalous activity and potential threats to network resources.
• Ensures that cybersecurity-enabled products or other security control technologies reduce identified risk to an acceptable level.
• Assists in the assessment of new information technology solutions requested by the organization to ensure solutions meet both El Rio information technology and information security standards.
• Documents and escalates incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Provides daily summary reports of network events and activity relevant to cyber defense practices.
• Uses cyber defense tools for continual monitoring and analysis of system activity to identify potentially malicious activity.
• Participates in providing community stakeholders and management with security risk assessments and security briefings to advise them of issues that may affect business outcomes.
• Assesses adequate access controls based on principles of least privilege and need-to-know.
• Works with stakeholders to resolve computer security incidents and vulnerability compliance.
• Demonstrates skill in reading, interpreting, writing, modifying, and executing simple scripts on systems.
• Must be able to communicate technical information to less technical or non-technical audiences.
• Contributes to team effort; complies with all facility policies and procedures including but not limited to those addressing HIPAA and Compliance.
• May be required to receive advanced training and obtain related certifications.
• Maintains a clean, safe, and hygienic work environment in compliance with all Policies and Procedures including but not limited to work areas, workstations, examination rooms, hand washing, infection prevention and control etc. for this position
• Demonstrates an understanding of and proficiency with the application of all compliance and reporting requirements respective to Joint Commission Certification (JCC) standards.

Minimum Education and Experience:

• Associates degree in Information Technology, Business, Computer Science, Finance or a related field from an accredited college or university or;
• Five (5) years’ of relevant work experience.

If applicable, equivalent combination of education and experience may be considered, and must be directly related to the functions and responsibilities of the job.

Required Licenses, Certifications, and Registrations:

• Employees in this position are required to have reliable transportation that can meet any operational reassignments of the organization during the workday.If an employee is driving during work hours, the employee is required to possess a valid driver’s license and must comply with Arizona vehicle insurance requirements.
• CompTIA Security+ certification, or comparable industry certification.

Preferred Education, Experience, Skills, Abilities:

• Bachelor’s Degree in Information Technology, Information Security or related field from an accredited college or university
• Security certification(s), e.g., CISA, CISM, GIAC, CISSP
• Bilingual (English/Spanish) with the ability to speak, read and write in both languages

Reasonable accommodations may be made to enable individuals with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for sincerely held religious beliefs, observances, and practices to perform the essential functions of the job.

El Rio Health does not discriminate based on race, color, religion, sex (including pregnancy, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, or other non-merit-based factors. It is our intention that all qualified applicants be given equal opportunity and that selection decisions are based on job-related factors.

El Rio Health requires all AZ employees to have a Level One Fingerprint Clearance card. A.R.S. 36.425.03. New hires and transfers must submit their fingerprint clearance card or fingerprint receipt before their hire date or transfer date. Level One (1) Non-IVP Fingerprint Clearance card must be received within 30 days after the new employee hire date or transfer date.

All employees are strongly recommended to obtain and maintain vaccination status (i.e., as recommended by CDC and/or other public health agencies) to include an Influenza vaccination. Subject to exemptions and accommodations when required by law. (Policy: Adm-016 & Adm-045).

All employees are required to undergo drug testing prior to employment and will be subject to post-accident, reasonable suspicion, return to duty and follow up drug and alcohol testing in compliance with Federal and State regulations for alcohol and controlled substance testing. Employees in positions holding responsibility for the safety and welfare of others will also be classified as safety sensitive.

El Rio Health is a non-profit 501(c)(3) Federally Qualified Health Center (FQHC) and abides by all applicable federal Drug-Free Workplace standards. El Rio Health is an equal opportunity employer.