Lead Cybersecurity Analyst

Billings Clinic; Billings, Northern (MT, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Billings Clinic is seeking a Lead Cybersecurity Analyst to provide advanced expertise and lead-level coordination for protecting information systems, networks, and data across our MT-based health system. You will guide threat monitoring, incident response, and security controls in a collaborative environment.

Key responsibilities include overseeing security operations, mentoring analysts, and partnering with IT, compliance, and leadership to strengthen defenses while aligning with HIPAA and

Qualifications

• Bachelor's degree in cybersecurity or related field.
• Five years of cybersecurity/IT experience preferred.
• Experience with risk assessment and incident handling.

Responsibilities

• Lead daily cybersecurity operations and monitor security events.
• Coordinate incident response and escalation.
• Evaluate security controls and mitigate risks.
• Collaborate with IT, compliance, and stakeholders.

Skills

Cybersecurity operations

Threat monitoring

Incident response

Security controls

Team leadership

Education

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field

Tools

Firewall technologies

IDS/IPS

Vulnerability scanners

Job description

You’ll want to join Billings Clinic for our outstanding quality of care, exciting environment, interesting cases from a vast geography, advanced technology and educational opportunities. We are in the top 1% of hospitals internationally for receiving Magnet® Recognition consecutively since 2006.

And you’ll want to stay at Billings Clinic for the amazing teamwork, caring atmosphere, and a culture that values kindness, safety and courage. This is an incredible place to learn and grow. Billings, Montana, is a friendly, college community in the Rocky Mountains with great schools and abundant family activities. Amazing outdoor recreation is just minutes from home. Four seasons of sunshine!

You can make a difference here.

About Us

Billings Clinic is a community-owned, not-for-profit, Physician-led health system based in Billings with more than 4,700 employees, including over 550 physicians and non-physician providers. Our integrated organization consists of a multi-specialty group practice and a 304-bed hospital. Learn more about Billings Clinic (our organization, history, mission, leadership and regional locations) and how we are recognized nationally for our exceptional quality.

Your Benefits

We provide a comprehensive and competitive benefits package to all full- and part-time employees (minimum of 20 hours/week), including Medical, Dental, Vision, 403(b) Retirement Plan with employer matching, Defined Contribution Pension Plan, Paid Time Off, employee wellness program, and much more. Click here for more information or download the Employee Benefits Guide .

Magnet: Commitment to Nursing Excellence

Billings Clinic is proud to be recognized for nursing excellence as aMagnet®-designated organization, joining only 97 other organizations worldwide that have achieved this honor four times. The re-designation process happens every four years. Click here to learn more!

Pre-Employment Requirements

All new employees must complete several pre-employment requirements prior to starting. Click here to learn more!

Lead Cybersecurity Analyst

PMO / OPERATIONS - 100.8732 (Billings Clinic Main Campus) req12666
Shift: Fully Remote
Employment Status: Full-Time (.75 or greater)
Hours per Pay Period: 1.00 = 80 hours every two weeks (Exempt)
Starting Wage DOE

The Lead Cybersecurity Analyst provides advanced technical expertise and lead-level coordination for the protection of Billings Clinic’s information systems, digital assets, networks, applications, and data. This position supports the proactive assessment, monitoring, analysis, and response to cybersecurity threats and vulnerabilities. The Lead Cybersecurity Analyst serves as a technical resource for cybersecurity operations, incident response, threat analysis, security controls, risk mitigation, and security best practices.
This role partners with Information Technology teams, operational leaders, vendors, compliance, privacy, and other stakeholders to evaluate cybersecurity risks, support secure technology solutions, and strengthen the organization’s security posture. The position provides guidance to cybersecurity team members, supports prioritization of work, assists with escalation of complex issues, and promotes consistent cybersecurity practices across the organization.

Essential Job Functions

• Cybersecurity Operations and Threat Monitoring
  Leads and supports daily cybersecurity operations, including monitoring, analysis, investigation, and response to security events, alerts, vulnerabilities, and emerging threats.
  Analyzes cybersecurity events and determines potential impact to systems, operations, users, and the organization.
  Maintains awareness of the current cybersecurity threat landscape by reviewing threat intelligence, industry alerts, security advisories, internet postings, and other relevant sources.
  Identifies trends, recurring issues, and potential risks, and recommends actions to reduce exposure to malicious cyber activity.
  Maintains and supports cybersecurity tools, monitoring systems, and related technologies used to protect the environment.
• Incident Response and Escalation
  Determines whether monitored security events should be escalated to incidents and follows applicable incident response and reporting processes.
  Leads or supports cybersecurity incident response activities, including triage, containment, investigation, documentation, escalation, communication, and remediation follow-up.
  Provides technical guidance during cybersecurity events, system compromises, vulnerability concerns, and other high-risk security situations.
  Supports post-incident reviews and assists with identifying root causes, lessons learned, and process improvements.
  Coordinates with Information Technology, Compliance, Privacy, leadership, vendors, and other stakeholders during cybersecurity incidents as appropriate.
• Security Controls, Risk Reduction, and Technical Consultation
  Implements, monitors, and evaluates security controls to protect Billings Clinic systems, networks, data, applications, and digital assets.
  Provides cybersecurity consultation on IT initiatives, business projects, application changes, infrastructure changes, and technology implementations.
  Evaluates security tools, technologies, and processes and makes recommendations to address identified risks or security needs.
  Supports vulnerability assessment, system hardening, access controls, network security, endpoint protection, and other security risk-reduction efforts.
  Reviews security implications of proposed technical solutions and provides recommendations consistent with organizational policies, standards, and industry best practices.
• Lead Responsibilities and Team Support
  Provides lead-level guidance, mentoring, and technical support to cybersecurity analysts and other team members.
  Assists with prioritizing team workload, coordinating response to security events, and ensuring timely follow-through on assigned work.
  Supports development and maintenance of cybersecurity procedures, playbooks, standards, documentation, and operational workflows.
  Serves as an escalation point for complex cybersecurity issues, investigations, and technical questions.
  Assists leadership with identifying training needs, process gaps, tool improvements, and opportunities to strengthen team effectiveness.
  Promotes a culture of accountability, collaboration, continuous improvement, and service excellence within the cybersecurity team.
• Collaboration, Compliance, and Organizational Support
  Works closely with Information Technology operations, network teams, system administrators, application teams, business stakeholders, and other appropriate groups to evaluate and respond to cybersecurity risks.
  Supports organizational compliance with applicable policies, procedures, HIPAA, confidentiality requirements, cybersecurity standards, and regulatory expectations.
  Assists with audits, security reviews, risk assessments, documentation requests, and reporting as needed.
  Communicates cybersecurity risks, technical issues, recommendations, and status updates clearly to both technical and non-technical audiences.
  Supports and models behaviors consistent with Billings Clinic’s mission, vision, values, code of business conduct and service expectations. Meets all mandatory organizational and departmental requirements. Maintains competency in all organizational, departmental and outside agency standards as it relates to the environment, employee, patient safety or job performance.
  Performs all other duties as assigned or as needed to meet the needs of the department/organization.

Minimum Qualifications

Education

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems, Computer Engineering, or a related field required. Equivalent education, certifications, and directly related experience may be considered.

Experience

• Five years of progressively responsible experience in cybersecurity, information security, information technology, network security, systems security, or a related technical role required. Healthcare experience preferred.
• Strong experience with information system security, firewalls, intrusion detection/prevention, vulnerability assessment tools, network security, and internal network/service discovery.
• Working knowledge of forensic tools, network monitoring tools, host security prevention tools, and related cybersecurity technologies.
• Experience with cybersecurity incident handling, threat analysis, risk assessment, and security control monitoring.
• Strong analytical, problem-solving, communication, documentation, and collaboration skills.
• Ability to monitor cybersecurity news, advisories, threat reports, and emerging risks to determine potential impact to the organization.
• Experience with cloud security technologies preferred.

Certifications and Licenses

• Cybersecurity certification preferred, such as CISSP, CCSP, CEH, SSCP, Security+, Certificate in Cybersecurity, or related certification. The current Analyst II description lists these cybersecurity certifications as strongly preferred.

Or an equivalent combination of education and experience relating to the above tasks, knowledge, skills and abilities will be considered. Employees that require a licensed or certification must be properly licensed/certified and the licensure/certification must be in good standing.

Billings Clinic is Montana’s largest health system serving Montana, Wyoming and the western Dakotas. A not-for-profit organization led by a physician CEO, the health system is governed by a board of community members, nurses and physicians. Billings Clinic includes an integrated multi-specialty group practice, tertiary care hospital and trauma center, based in Billings, Montana. Learn more at www.billingsclinic.com/aboutus

Billings Clinic is committed tobeing an inclusive and welcoming employer, that strives to be kind, safe, andcourageous in all we do. As an equal opportunity employer, our policies andprocesses are designed to achieve fair and equitable treatment of all employeesand job applicants. All employees and job applicants will be provided the sametreatment in all aspects of the employment relationship, regardless of race,color, religion, sex, gender identity, sexual orientation, pregnancy, maritalstatus, national origin, age, genetic information, military status, and/ordisability. To ensure we provide an accessible candidate experience forprospective employees, please let us know if you need any accommodations duringthe recruitment process.

Billings Clinic is committed tobeing an inclusive and welcoming employer, that strives to be kind, safe, andcourageous in all we do. As an equal opportunity employer, our policies andprocesses are designed to achieve fair and equitable treatment of all employeesand job applicants. All employees and job applicants will be provided the sametreatment in all aspects of the employment relationship, regardless of race,color, religion, sex, gender identity, sexual orientation, pregnancy, maritalstatus, national origin, age, genetic information, military status, and/ordisability. To ensure we provide an accessible candidate experience forprospective employees, please let us know if you need any accommodations duringthe recruitment process.

Human Resources is located on the corner of North 29th and8th Avenue North. Enter through the main entrance to the building and go to the lower level. Human Resources is located at the bottom of the main entrance staircase to the right.