IT Security Analyst

Lake Regional Health System; Osage Beach (MO); Presencial; USD 70.000 - 100.000; Jornada completa

Descripción de la vacante

Lake Regional Health System is seeking an IT Security Analyst to oversee the cybersecurity program, assess risk, and coordinate remediation across technology, vendors, and processes. The role includes vulnerability assessments, incident management, and regulatory compliance support in a hospital environment.

Ideal candidate will have a Bachelor's degree in Computer Information Systems or equivalent IT administration experience, and strong knowledge of HIPAA and PCI security requirements.

Formación

• Bachelor's degree in Computer Information Systems or equivalent IT system administration experience.

Responsabilidades

• Oversees the daily management of LRHS cybersecurity program.
• Assesses cybersecurity risk and facilitates remediation of identified vulnerabilities across hardware, network, systems, workforce and applications.
• Performs assessments of IT security/risk posture within the network, systems and software applications; includes Vendor Management Program assessments.
• Performs vulnerability assessments using IT security tools and methodologies.
• Identifies opportunities to reduce risk and documents remediation options for risk acceptance or mitigation.
• Facilitates and monitors risk remediation tasks and changes related to risk mitigation.
• Reports findings and makes recommendations for corrective action or improvements.
• Maintains oversight of IT and vendors regarding security of systems and applications.
• Establishes and maintains relationships with other departments and documents OT systems into cybersecurity policies.
• Provides regular status reports including outstanding issues.
• Aids in IT audits, risk assessments and regulatory compliance matters.
• Performs IT security and risk assessments across the enterprise (data, network, web).
• Includes Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, Forensic Analysis.
• Facilitates and monitors IT Security incident management and response.
• Addresses questions from internal and external audits/examinations.
• Provides guidance for IT security policies and standards, including HIPAA and PCI.
• Creates and facilitates IT security/risk training curriculum.
• Serves as project manager/lead for IT security projects and leads security risk assessments.
• Collaborates with CIO and IT Manager to maintain cybersecurity policies including disaster recovery and business continuity.

Conocimientos

Cybersecurity risk assessment

Vulnerability assessment

IT security

Incident management

Audit support

Regulatory compliance

HIPAA compliance

PCI compliance

Vendor management

IT governance

Educación

Bachelor's degree in Computer Information Systems

3+ years IT system administration

Descripción del empleo

Lake Regional Hospital Campus Hospital Information Systems

Osage Beach , MO

Technical

Full Time , Day Shift , M-F

IT Security Analyst

Oversees the daily management of LRHS cybersecurity program. Assessing cybersecurity risk and facilitates remediation of identified vulnerabilities with hardware, network, systems, workforce and applications. Performing assessments of the IT security/risk posture within the network, systems, and software applications in addition to assessments within the Vendor Management Program. Performing vulnerability assessments utilizing IT security tools and methodologies. Identifying opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios. Facilitating and monitoring the performance of risk remediation tasks and changes related to risk mitigation. Reporting findings and making recommendations for corrective action and/or improvements.

Maintaining oversight of IT and vendors regarding security maintenance of their systems and applications. Establishes and maintains relationships with other department(s) regarding information technology (OT) systems, documents and incorporates OT systems into cybersecurity policies and procedures. Providing regular status reports that include outstanding issues.

Assisting in all IT audits, risk assessments and regulatory compliance matters. Performing IT security and risk assessments across the enterprise (e.g., data systems, network and/or web). This includes Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, and Forensic Analysis. Facilitating and monitoring IT Security incident management and response. Addressing questions from internal and external audits and examinations.

Providing guidance and best practice recommendations for IT security policies, procedures, and standards that meet regulatory requirements, including HIPAA and PCI. Creating and facilitating IT security/risk training curriculum for the enterprise.

Serving as project manager/lead for IT security projects. Leading IT architecture security risk assessments and developing solutions/processes. In collaboration with the CIO and Manager of IT, they create, maintain and evaluate a comprehensive set of cybersecurity policies and processes including disaster recovery and business continuity.

Education: Bachelor's degree in Computer Information Systems or a minimum of 3 years of equivalent IT system administration.

We offer a competitive compensation package thatincludesexcellent benefits.