IT Security Analyst

Lake Regional Health System; Osage Beach (MO); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Excellent benefits

Job summary

Lake Regional Health System in Missouri seeks an IT Security Analyst to oversee the daily management of its cybersecurity program. You will assess risk, facilitate remediation, and collaborate with IT and vendors to protect data across networks, systems, and applications.

The role emphasizes IT security risk assessments, incident response, HIPAA/PCI compliance, and training. A Bachelor’s degree in Computer Information Systems or 3+ years of equivalent IT administration is required, and annual

Qualifications

• Bachelor's degree in Computer Information Systems or a minimum of 3 years of equivalent IT system administration.
• HIPAA and PCI knowledge are desirable.
• Annual influenza vaccination is required.

Responsibilities

• Oversees the daily management of LRHS cybersecurity program.
• Perform risk assessments and facilitate remediation of identified vulnerabilities across hardware, networks, systems, and applications.
• Support IT audits, risk assessments, and regulatory compliance matters (HIPAA/PCI).
• Lead IT security projects and monitor risk remediation tasks and changes.

Education

Bachelor's degree in Computer Information Systems

Job description

IT Security Analyst

Oversees the daily management of LRHS cybersecurity program. Assessing cybersecurity risk and facilitates remediation of identified vulnerabilities with hardware, network, systems, workforce and applications. Performing assessments of the IT security/risk posture within the network, systems, and software applications in addition to assessments within the Vendor Management Program. Performing vulnerability assessments utilizing IT security tools and methodologies. Identifying opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios. Facilitating and monitoring the performance of risk remediation tasks and changes related to risk mitigation. Reporting findings and making recommendations for corrective action and/or improvements.

Maintaining oversight of IT and vendors regarding security maintenance of their systems and applications. Establishes and maintains relationships with other department(s) regarding information technology (OT) systems, documents and incorporates OT systems into cybersecurity policies and procedures. Providing regular status reports that include outstanding issues.

Assisting in all IT audits, risk assessments and regulatory compliance matters. Performing IT security and risk assessments across the enterprise (e.g., data systems, network and/or web). This includes Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, and Forensic Analysis. Facilitating and monitoring IT Security incident management and response. Addressing questions from internal and external audits and examinations.

Providing guidance and best practice recommendations for IT security policies, procedures, and standards that meet regulatory requirements, including HIPAA and PCI. Creating and facilitating IT security/risk training curriculum for the enterprise.

Serving as project manager/lead for IT security projects. Leading IT architecture security risk assessments and developing solutions/processes. In collaboration with the CIO and Manager of IT, they create, maintain and evaluate a comprehensive set of cybersecurity policies and processes including disaster recovery and business continuity.

Education: Bachelor’s degree in Computer Information Systems or a minimum of 3 years of equivalent IT system administration.

An annual influenza vaccination is required.

We offer a competitive compensation package that includes excellent benefits.