Information Security Analyst II - Identity Management

UHS of Delaware, Inc. - Corporate Office; Tredyffrin Township (Chester County); In loco; USD 95.000 - 125.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive compensation

Excellent medical, dental, vision plan

401k with company match

Generous paid time off

Descrizione del lavoro

Universal Health Services, Inc. is seeking an Information Security Analyst II - Identity Management in King of Prussia, PA. You will support IGA/IAM capabilities, lifecycle management, access provisioning, and certification processes across the organization.

The role requires 3–5 years in information security/IAM, strong communication, and the ability to work with HR, Compliance, and application owners to onboard and manage access. Travel to field locations may be necessary.

Competenze

• Bachelor’s degree in Information Systems, Cybersecurity or related field preferred.
• 3–5 years in information security, IAM, or identity governance.
• Experience with IGA/IAM concepts: lifecycle, provisioning, certifications, and RBAC.
• Experience configuring identity/security tools like AD, Entra ID, SIEM, MFA.
• Familiarity with HRIS/ERP-driven identity workflows.
• Knowledge of SOX, HIPAA, HITECH regulatory security requirements.
• Knowledge of HITRUST, NIST or similar frameworks.
• PowerShell, APIs or scripting and automation experience is a plus.
• Excellent communication, interpersonal and PM skills.
• Willingness to travel to field locations.

Mansioni

• Support implementation and operation of IGA/IAM capabilities.
• Analyze identity/access data to identify excessive or unnecessary access.
• Improve governance through stronger controls and automation.
• Collaborate with HR, Compliance, and application stakeholders on onboarding.
• Act as SME for at least one technology/process and mentor staff.
• Monitor resolution of maintenance or enhancement issues.
• Perform other duties as assigned.

Conoscenze

Identity governance

Access management

Communication

Project management

Information security

Formazione

Bachelor’s degree in Information Systems, Cybersecurity or related field

Strumenti

Active Directory

Entra ID

SIEM

PowerShell

RBAC

Descrizione del lavoro

Responsibilities

Headquartered in King of Prussia, PA, Universal Health Services, Inc. (NYSE: UHS) is one of the nation’s largest and most respected providers of hospital and healthcare services. Since our founding in 1979, UHS has grown steadily into a premier Fortune 500® corporation perennially recognized by multiple esteemed national rating entities. Through its subsidiaries, UHS operates inpatient acute care facilities, inpatient behavioral health facilities, outpatient and other facilities, nationwide virtual behavioral health services, an insurance offering, a physician network and various related services with physical locations in the U.S., Puerto Rico, Ireland and United Kingdom. www.uhs.com

The Corporate Information Technology Department is seeking a dynamic and talented Information Security Analyst II - Identity Management.

As a key member of our collaborative Cybersecurity team, the Information Security Analyst II will play a critical role in safeguarding UHS and affiliates information systems. In this role, you will support the development, implementation, and ongoing operation of Identity Governance and Administration (IGA) and Identity and Access Management (IAM) capabilities, including identity lifecycle management, access governance, provisioning and deprovisioning, access certifications, entitlement management, and application onboarding. Trains and supports technical staff in UHS affiliated locations, where appropriate, to deploy, manage and support selected technologies. Oversees the technical aspects of tasks assigned to less experienced staff or contractors on projects, systems or applications assigned. Adheres to UHS standards of service excellence, professionalism, and integrity while performing duties.

Key responsibilities include:

• Support the implementation, administration, and ongoing operation of IGA/IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, access requests, certifications, entitlement management, role-based access, and application onboarding.
• Analyze identity and access data, processes, workflows, and controls to identify inappropriate, excessive, orphaned, or unnecessary access and support remediation.
• Identify opportunities to improve identity governance and access management through stronger controls, automation, and improved joiner/mover/leaver processes.
• Collaborate with Identity Engineering, Cybersecurity, HR, Compliance, application owners, and business stakeholders on application onboarding, access models, workflows, and controls.
• Acts as the subject matter expert (SME) for at least one technology or process, and provides technical support and guidance to other team members. May oversee efforts of junior staff who assist with the assigned technology or process.
• Monitors the resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center.
• Performs other duties as assigned/required.

Qualifications

• Bachelor’s degree required. Degree in Information Systems, Cybersecurity and Risk Management, Computer Science, or related field preferred.
• Minimum 3–5 years of experience in information security, identity and access management (IAM), identity governance, or related technology disciplines.
• Experience with or working knowledge of Identity Governance and Administration (IGA) and IAM concepts, including identity lifecycle management, joiner/mover/leaver processes, access provisioning and deprovisioning, access requests, access certifications/reviews, entitlement management, and role-based access control (RBAC).
• Experience configuring, managing and supporting some or all of the following or similar information security technologies or processes:
  • Microsoft Active Directory and Entra ID or comparable enterprise identity platforms
  • Anti-malware protections and analysis
  • Web filtering and security
  • Vulnerability scanning and management
  • Encryption technologies for data at rest and data in transit
  • Mobile device and removable media protection or management systems
  • Authentication – including various forms of SSO and MFA
  • Cloud application security
  • Security Information and Event Management (SIEM) systems
  • Interpreting Common Vulnerabilities and Exposures (CVE ) data
  • Device control
  • Data Loss Prevention (DLP)
  • Forensic analysis
• Familiarity with HR/HRIS or ERP-driven identity lifecycle processes and the use of authoritative identity sources for automated provisioning and deprovisioning.
• Working knowledge of various regulatory security requirements – particularly Sarbanes-Oxley (SOX), HIPAA, and HITECH.
• Working knowledge of common cyber security frameworks such as HITRUST, NIST, or others.
• Experience with PowerShell, APIs, scripting, workflow automation, or identity system integrations is a plus.
• Ability to prioritize multiple tasks and be detail oriented.
• An information security certification is a plus -- to demonstrate proficiency and knowledge of information security best practices and concepts.
• Excellent communication, interpersonal and project management skills
• Travel to field locations may be necessary to complete assigned projects

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly‑owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.

EEO Statement

All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.