IT Security Analyst Sr

Ann & Robert H. Lurie Children's Hospital of Chicago; Chicago (IL); On-site; USD 94,000 - 154,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

403(b) with 5% employer match

Paid time off and holidays

Wellbeing programs

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking an IT security professional to protect medical devices and operational technology across departments.

You will collaborate with IT Operations Security and Health Technology Management to assure safety and resiliency of devices used throughout the hospital. The role combines threat modeling, risk assessments, and design reviews for cybersecurity in regulated medical environments, with opportunities to automate processes and

Qualifications

• Bachelor’s degree in a major science or engineering discipline or related field.
• Experience with Product Safety, Security Risk Assessments, and Security-by-Design.
• Experience with medical device cybersecurity design, policies, support and maintenance.
• Experience with medical devices or other highly regulated applications.
• Proven engineering knowledge across multiple technical disciplines.

Responsibilities

• Provide cybersecurity expertise for medical devices and related technological solutions.
• Identify potential cybersecurity threats and develop mitigations.
• Lead medical device cybersecurity risk assessments and mitigation initiatives.
• Automate repeatable tasks to improve efficiencies.
• Independently plan and manage work within security and cross-functional teams.

Skills

Cybersecurity design

Threat modeling

Security risk assess.

Medical devices

Regulated environments

Security tools

Troubleshooting

Cross-functional teamwork

MS Office

Analytical thinking

Education

Bachelor's Degree

Tools

Firewalls

EPP

SIEM

Qualys

Rapid7

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children’s Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.

Location

680 Lake Shore Drive

Job Description

Works with Manager IT Operations Security, Health Technology Management, Lab Information Systems, Medical Imaging and other operational technology departments to help assure protection and resiliency of specialized devices utilized throughout Lurie Children’s.

Essential Job Functions

• Provide cybersecurity expertise for medical devices and related technological solutions;
• Apply understanding of product/line and clinical applications to identify potential cybersecurity threats and develop mitigations;
• Perform threat modeling on device security architecture and assess cybersecurity risks and risk mitigations;
• Lead medical device cybersecurity risk assessments and mitigation initiatives;
• Understand interdependencies of processes required to accomplish department and organizational objectives.
• Support process definition and improvements;
• Demonstrate skill for independent analysis and synthesis of solutions for problems, exhibiting creativity, foresight, innovation, and judgment in anticipating and solving these problems;
• Consistently apply complex analytical methods;
• Independently plan and manage your work to achieve objectives within the security team and cross-functional teams
• Provide technical consulting, collaboration and advice to peers
• Define cybersecurity requirements for design elements at the module level.
• Automate repeatable tasks to improve efficiencies and expedite responses

Knowledge, Skills And Abilities

• Minimum of a Bachelor’s degree in a major science or engineering discipline (e.g., Cybersecurity, Systems, Biomedical, Electrical, Mechanical, Software, IT) or related field (or equivalent work experience)
• Significant and relevant overall engineering or equivalent experience and education, including demonstrated experience conducting Product Safety, Security Risk Assessments, and Security-by-Design
• Experience with product cybersecurity design, policies, support and maintenance
• Experience with medical device or other highly regulated applications
• Proven engineering knowledge crossing into multiple technical disciplines
• Experience with Security tools ( i.e. Firewalls, EPP, SIEM, Qualys, Rapid7 )
• Demonstrated skill for troubleshooting complex problems exhibiting creativity, foresight, innovation, and judgement
• Excellent persuasion and consensus-building with the ability to work in cross-functional teams
• Working knowledge of MS Office applications and statistical analysis skills
• Ability to independently plan and manage own work activities to achieve department objectives
• Strong competency in Customer Focus, Driving for Results, Integrity and Trust, Ethics and Values and Compassion
• Other duties as assigned

Education

Bachelor's Degree

Pay Range

$93,600.00-$154,440.00 Salary

At Lurie Children’s, we are committed to competitive and fair compensation aligned with market rates and internal equity, reflecting individual contributions, experience, and expertise. The pay range for this job indicates minimum and maximum targets for the position. Ranges are regularly reviewed to stay aligned with market conditions. In addition to base salary, Lurie Children’s offer a comprehensive rewards package that may include differentials for some hourly employees, leadership incentives for select roles, health and retirement benefits, and wellbeing programs.

Benefits

For full time and part time employees who work 20 or more hours per week we offer a generous benefits package that includes:

• Medical, dental and vision insurance
• Employer paid group term life and disability
• Employer contribution toward Health Savings Account
• Flexible Spending Accounts
• Paid Time Off (PTO), Paid Holidays and Paid Parental Leave
• 403(b) with a 5% employer match

Various Voluntary Benefits

• Supplemental Life, AD&D and Disability
• Critical Illness, Accident and Hospital Indemnity coverage
• Tuition assistance
• Student loan servicing and support
• Adoption benefits
• Backup Childcare and Eldercare
• Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members
• Discount on services at Lurie Children’s facilities
• Discount purchasing program

There’s a Place for You with Us

At Ann & Robert H. Lurie Children’s Hospital of Chicago and its affiliates (collectively “Lurie Children’s”), we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints — recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.

Lurie Children’s and its affiliates are equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.

For questions about how to request an accommodation please contact: [e-mail]

AI Notice

Lurie Children’s utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals.

It is a civil rights violation with respect to recruitment, hiring, promotion, or employment for an employer to use artificial intelligence that has the effect of subjecting employees to discrimination on the basis of protected classes under the Illinois Human Rights Act or to use zip codes as a proxy for protected classes.

For questions about the use of artificial intelligence in this process or any additional support, please contact: [e-mail]