Information Security Risk Analyst I

Nationwide Children's Hospital; United States; On-site; USD 65,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Job summary

Nationwide Children's Hospital is seeking an information security professional to support the ISRD. The role covers security policy development, risk management, privacy, and related concepts within a healthcare environment.

You will perform security assessments, assist incident response, third-party risk, and security training, while staying current with industry changes. A BS in CS and 2 years IT experience are expected; Security+ or CISSP preferred.

Qualifications

• BS in Computer Science or equivalent experience required.
• Continues to stay actively involved in outside education advancement.
• Two years of IT experience; healthcare experience preferred.
• Security+, CISSP or equivalent preferred.
• Strong problem-solving, presentation, and communication skills.

Responsibilities

• Participates in the development and maintenance of information security policies, standards, and procedures.
• Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.
• Participates in risk analysis of identified issues to determine recommended risk treatment.
• Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.
• Coordinates business and information services resources for project and operational support.
• Stays up-to-date and informed of information security industry changes and trends.

Skills

Problem solving

Presentation

Interpersonal comms

Project management

Microsoft Office

Education

BS in Computer Science or equivalent

Job description

Overview:

Job Description Summary:

Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.

Job Description:

Essential Functions:

• Participates in the development and maintenance of information security policies, standards, and procedures.
• Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.
• Participates in risk analysis of identified issues to determine recommended risk treatment.
• Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.
• Coordinates business and information services resources for project and operational support.
• Stays up-to-date and informed of information security industry changes and trends.

Education Requirement:

BS in Computer Science or equivalent experience required.

Continues to stay actively involved in outside education advancement.

Licensure Requirement:

(not specified)

Certifications:

Security+, CISSP or equivalent preferred.

Skills:

Strong problem-solving ability.

Exceptional presentation skills.

Exceptional interpersonal, written, and verbal communication skills.

Demonstrated project management skills.

Proficient in Microsoft Office.

Experience:

Twoyears of experience in IT; experience in healthcare, preferred.

Physical Requirements:

OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, Walking

FREQUENTLY: (none specified)

CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing – Far/near, Sitting

Additional Physical Requirements performed but not listed above:

(not specified)

“The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet”