IT Security Analyst IV

Horizon Blue Cross Blue Shield of New Jersey; Newark (NJ); On-site; USD 98,000 - 133,000; Full time

Benefits offered by this job

Comprehensive health benefits

Retirement plans

Generous PTO

Tuition reimbursement

Job summary

Horizon Blue Cross Blue Shield of New Jersey is seeking a lead security analyst within IT Security Governance and IT Security Operations to oversee the administration, monitoring, and continuous improvement of critical security technologies. The role supports day-to-day cybersecurity operations, enterprise-wide initiatives, and audit readiness while guiding security controls across policies and procedures.

You will collaborate with cross-functional teams to protect PHI and member data in a

Qualifications

• Minimum high school diploma or GED.
• Requires Bachelor's degree, preferably in Computer Science, from an accredited college or university.
• Prefers advanced degree in Information Security, Computer Science or related field.
• 5 years prior IT security related work experience.
• Experience with IDS, IPS, ICE Engine or

Responsibilities

• Recommend FireWall change requests for approval.
• Analyze and take appropriate action on intrusion detections.
• Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance.
• Review and approve access requests.
• Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles.
• Map work flows in provisioning users into our systems and infrastructure.
• Comply with internal and external audit requests.
• Monitor the effectiveness of the Enterprise wide information security program.
• Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations.
• Participate in investigating possible security violations.
• Track and maintain operational security access metrics.
• Design workflow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information.
• Provide guidance and direction regarding security control elements in policies throughout the organization.
• Document relevant business processes and their implications on information security.
• Develop information security risk identification, tracking and mitigation processes strategy and methodology.
• Develop the information security awareness, training and education program-s strategy and methodology.
• Facilitate or lead development of accurate and relevant information security process and operational metrics.
• Establish monitoring measures to detect and ensure correction of security breaches and policy violations.
• Proactively keep current on information security issues related to business processes as input into departmental policies and procedures.
• Analyze and enhance the effectiveness of the Enterprise wide information security program.

Skills

IT security concepts

Security governance

RBAC

Security risk assessment

Cloud security

Threat detection

SIEM

EDR (Crowdstrike)

Palo Alto Firewalls

Education

Bachelor's degree in Computer Science

Advanced degree in Information Security or related field

Tools

Palo Alto Networks

Prisma GlobalProtect VPN

Cisco Sourcefire

Cisco Stealthwatch

Cisco Identity Services Engine (ISE)

Secure Mail Gateway (ProofPoint)

Enterprise Proxy

Endpoint Protection Platforms

Data Loss Prevention (DLP)

FIM

Vulnerability Scanning Platforms

EDR (Crowdstrike)

Web Application Firewall (WAF)

CASB

Cloud Security Controls

Job description

Horizon Blue Cross Blue Shield of New Jersey empowers our members to achieve their best health. For over 90 years, we have been New Jersey’s health solutions leader driving innovations that improve health care quality, affordability, and member experience. Our members are our neighbors, our friends, and our families. It is this understanding that drives us to better serve and care for the 3.5 million people who place their trust in us. We pride ourselves on our best-in-class employees and strive to maintain an innovative and inclusive environment that allows them to thrive. When our employees bring their best and succeed, the Company succeeds.

About The Role

This position is a lead security analyst within IT Security Governance and IT Security Operations. The incumbent will be responsible for the administration, monitoring, maintenance, and continuous improvement of numerous critical security technologies. In addition to maintaining day‑to‑day cybersecurity operations, the team is responsible for several enterprise‑wide strategic initiatives.

What You’ll Do

IT Security Operations

• Recommend FireWall change requests for approval
• Analyze and take appropriate action on intrusion detections
• Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance
• Review and approve access requests
• Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles
• Map work flows in provisioning users into our systems and infrastructure
• Comply with internal and external audit requests
• Monitor the effectiveness of the Enterprise wide information security program
• Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations
• Participate in investigating possible security violations
• Track and maintain operational security access metrics

IT Security Governance

• Design workflow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information
• Provide guidance and direction regarding security control elements in policies throughout the organization
• Document relevant business processes and their implications on information security
• Develop information security risk identification, tracking and mitigation processes strategy and methodology
• Develop the information security awareness, training and education program-s strategy and methodology
• Facilitate or lead development of accurate and relevant information security process and operational metrics
• Establish monitoring measures to detect and ensure correction of security breaches and policy violations
• Proactively keep current on information security issues related to business processes as input into departmental policies and procedures
• Analyze and enhance the effectiveness of the Enterprise wide information security program.

What You Bring

• Minimum high school diploma or GED
• Requires Bachelor's degree, preferably in Computer Science, from an accredited college or university
• Prefers advanced degree in Information Security, Computer Science or related field
• 5 years prior IT security related work experience
• Experience with IDS, IPS, ICE Engine or

Additional Licensing, Certifications, Registrations

• Requires one or more of the following certifications: CISSP, SANS GIAC or CISA

Knowledge

• Requires an excellent understanding of IT security concepts with an emphasis on Security and Risk Assessment
• Microsoft 365 security implementation and ongoing support
• Micro-segmentation initiatives to reduce lateral movement risks
• AI performance, governance, and security controls
• Data classification and sensitive data protection initiatives
• Cloud security enhancements
• Continuous vulnerability remediation efforts
• Security architecture improvements aligned with organizational objectives

Skills And Abilities

• Perimeter Defense
  • Palo Alto Networks (PAN) Firewalls)
  • Prisma GlobalProtect VPN
  • Cisco Sourcefire
  • Cisco Stealthwatch
  • Cisco Identity Services Engine (ISE)
  • Secure Mail Gateway (ProofPoint)
  • Enterprise Proxy
• Endpoint and Data Protection
  • Endpoint Protection Platforms
  • Data Loss Prevention (DLP)
  • File Integrity Monitoring (FIM)
  • Absolute/Computrace
  • Vulnerability Scanning Platforms
  • Disc Encryption
  • EDR (Crowdstrike)
• Application and Cloud Security
  • Web Application Firewall (WAF)
  • Secure Proxy Services
  • Zscaler
  • Application Security Programs
  • Cloud Access Security Broker (CASB)
  • Cloud Security Controls
• Security Operations
  • Security Information and Event Management (SIEM)
  • Security Monitoring and Alerting
  • Incident Response Activities
  • Threat Detection and Vulnerability Management

Why Horizon?

At Horizon, you’ll do meaningful work that directly improves lives—while being supported by a mission‑driven organization that values expertise, collaboration, and growth. We believe that when our people thrive, our communities do too. If you are passionate about making an impact, we’d love to hear from you!

Salary Range

$97,800 - $133,455

This compensation range is specific to the job level and takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to: education, experience, licensure, certifications, geographic location, and internal equity. This range has been created in good faith based on information known to Horizon at the time of posting. Compensation decisions are dependent on the circumstances of each case. Horizon also provides a comprehensive compensation and benefits package which includes:

• Comprehensive health benefits (Medical/Dental/Vision)
• Retirement Plans
• Generous PTO
• Incentive Plans
• Wellness Programs
• Paid Volunteer Time Off
• Tuition Reimbursement

Disclaimer

Horizon BCBSNJ employees must live in New Jersey, New York, Pennsylvania, Connecticut or Delaware. This job summary has been designed to indicate the general nature and level of work performed by colleagues within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of colleagues assigned to this job.

Horizon Blue Cross Blue Shield of New Jersey is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or status as an individual with a disability and any other protected class as required by federal, state or local law. Horizon will consider reasonable accommodation requests as part of the recruiting and hiring process.