Information Security Risk Analyst I

Nationwide Children's Hospital Inc; Columbus, Northern (OH, KY); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Nationwide Children's Hospital is seeking an Information Security Risk Analyst I to support the Information Security and Risk Department in Columbus, OH. The role requires developing and implementing security policies, conducting system assessments, and participating in risk analysis and incident response.

The ideal candidate holds a BS in Computer Science or equivalent, with two years of IT experience and familiarity with healthcare environments.

Qualifications

• BS in Computer Science or equivalent experience required.
• Security+ or CISSP or equivalent preferred.
• Two years of IT experience; healthcare experience preferred.

Responsibilities

• Participates in development and maintenance of information security policies, standards, and procedures.
• Plans and conducts security assessments on systems, processes and technologies to determine compliance with policies and regulatory requirements.
• Performs risk analysis of identified issues and recommends risk treatment.
• Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.
• Coordinates resources for project and operational support.
• Keeps up-to-date with information security industry changes and trends.

Skills

Information security

Risk analysis

Incident response

Third party risk mgmt

Vulnerability management

Disaster recovery

Project management

Microsoft Office

Communication skills

Presentation skills

Education

BS in Computer Science or related field

Tools

Microsoft Office

Job description

## Information Security Risk Analyst IApply: 431 S 18th St, Columbus, OH: Full time: Posted Yesterday: R-27380**Overview:****Job Description Summary:**Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.**Job Description:****Essential Functions:*** Participates in the development and maintenance of information security policies, standards, and procedures.* Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.* Participates in risk analysis of identified issues to determine recommended risk treatment.* Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.* Coordinates business and information services resources for project and operational support.* Stays up-to-date and informed of information security industry changes and trends. **Education Requirement:**BS in Computer Science or equivalent experience required.Continues to stay actively involved in outside education advancement. **Licensure Requirement:**(not specified) **Certifications:**Security+, CISSP or equivalent preferred. **Skills:**Strong problem-solving ability.Exceptional presentation skills.Exceptional interpersonal, written, and verbal communication skills.Demonstrated project management skills.Proficient in Microsoft Office. **Experience:**Twoyears of experience in IT; experience in healthcare, preferred. **Physical Requirements:**OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, WalkingFREQUENTLY: (none specified)CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing – Far/near, Sitting **Additional Physical Requirements performed but not listed above:**(not specified) \"The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet\"