IT Security Analyst

OneOncology; Hillmont (AL); On-site; USD 75,000 - 105,000; Full time

Job summary

Clearview Cancer Institute in north Alabama seeks an IT Security Analyst to join our IT department. The role focuses on day-to-day security operations, incident response, and HIPAA compliance support across clinical and administrative systems.

You will monitor alerts, manage vulnerabilities, administer CrowdStrike and Microsoft 365 security controls, and develop an incident response plan. Strong communication and teamwork are essential.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Approximately 5 years of IT experience (networking, systems, or help desk).
• Industry certifications preferred (e.g., CompTIA Security+, CySA+, Network+, Pentest+, CISSP).
• Healthcare or HIPAA experience a plus.

Responsibilities

• Monitor and analyze security alerts, logs, and reports to detect, proactively mitigate, and respond to incidents.
• Support HIPAA Security Rule compliance, risk assessments, and audit documentation.
• Manage vulnerability and patch remediation across all sites.

Skills

Security expertise

Analytical thinking

Communication skills

Team collaboration

Independent work

Education

Bachelor's degree in Cybersecurity, Information Technology, or a related field

Tools

CrowdStrike

Microsoft 365

MFA

Job description

Clearview Cancer Institute is north Alabama's leading cancer treatment facility. For over 30 years Clearview Cancer Institute has provided leading-edge treatment and compassionate care to those diagnosed with cancer or blood disorders. Clearview offers every service and amenity needed in an outpatient setting and our dedication to research and involvement in Phase I-IV clinical trials gives our patients the opportunity to receive potentially life-saving treatment options.Why Join Us? We are looking for talented and highly-motivated individuals who demonstrate a natural desire to support the meaningful work of community oncologists and the patients we serve.Job Description:Job purposeThe purpose of the IT Security Analyst is to provide day-to-day security operations, compliance evidence, and incident responses. This role works closely with clinical and compliance teams to identify vulnerabilities, respond to incidents, and build security into every layer of our environment, from network infrastructure to clinical and administrative systems.Essential Job FunctionsKey ResponsibilitiesMonitor and analyze security alerts, logs, and reports to detect, proactively mitigate, and respond toundefinedSupport HIPAA Security Rule compliance, risk assessments, and audit documentation.Manage vulnerability and patch remediation across all sites.Administer endpoint, email, and identity security controls (CrowdStrike, Microsoft 365, MFA)Conduct ongoing risk assessments and security audits to maintain and demonstrate compliance.Stay updated with the latest security trends, threats, and technologies to proactively enhance our security posture.Develop and maintain an incident response plan to effectively handle security breaches, incidents, and breaches of sensitive data.Investigate security incidents, perform root cause analysis, and recommend corrective actions to prevent recurrence.Provide education and training to staff and stakeholders to promote a culture of security awareness and compliance.Provide general IT support and project work as needed.QualificationsStrong understanding of security technologies, tools, and methodologies, including intrusion detection systems, firewalls, encryption, and vulnerability assessment.Excellent analytical, problem-solving, and communication skills.Ability to work independently and as part of a team, effectively managing multiple tasks and priorities.Strong interpersonal skills to collaborate with stakeholders across various departments and levels of the organization.Education/ExperienceBachelor's degree in Cybersecurity, Information Technology, or a related fieldApproximately 5 years of IT experience (networking, systems, or help desk)Industry certifications preferred (e.g., CompTIA Security+, CySA+, Network+, Pentest+, CISSP)Healthcare or HIPAA experience a plusWorking conditions:This position operates in the IT department in a busy oncology/hematology/radiation clinic. This position has no direct patient contact. The person in this position may be required to work more than 40 hours per week, depending on the situation. This person may be on-call in the event of power outages, weather events, special events, etc.Physical requirements:This position requires that the employee be able to sit at a desk for up to two-thirds of the day on some days. This position also requires that the employee be able to lift up to 50 pounds when transporting materials/equipment. This position also requires dexterity of hands and fingers when dealing with power cords, tools, etc.Direct reports This position is not a supervisory position.