Lead IT Security Analyst - Operations & Governance

Horizon Blue Cross Blue Shield of New Jersey; Newark (NJ); On-site; USD 98,000 - 133,000; Full time

Benefits offered by this job

Comprehensive health benefits

Retirement plans

Generous PTO

Tuition reimbursement

Job summary

Horizon Blue Cross Blue Shield of New Jersey is seeking a lead security analyst within IT Security Governance and IT Security Operations to oversee the administration, monitoring, and continuous improvement of critical security technologies. The role supports day-to-day cybersecurity operations, enterprise-wide initiatives, and audit readiness while guiding security controls across policies and procedures.

You will collaborate with cross-functional teams to protect PHI and member data in a

Qualifications

• Minimum high school diploma or GED.
• Requires Bachelor's degree, preferably in Computer Science, from an accredited college or university.
• Prefers advanced degree in Information Security, Computer Science or related field.
• 5 years prior IT security related work experience.
• Experience with IDS, IPS, ICE Engine or

Responsibilities

• Recommend FireWall change requests for approval.
• Analyze and take appropriate action on intrusion detections.
• Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance.
• Review and approve access requests.
• Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles.
• Map work flows in provisioning users into our systems and infrastructure.
• Comply with internal and external audit requests.
• Monitor the effectiveness of the Enterprise wide information security program.
• Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations.
• Participate in investigating possible security violations.
• Track and maintain operational security access metrics.
• Design workflow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information.
• Provide guidance and direction regarding security control elements in policies throughout the organization.
• Document relevant business processes and their implications on information security.
• Develop information security risk identification, tracking and mitigation processes strategy and methodology.
• Develop the information security awareness, training and education program-s strategy and methodology.
• Facilitate or lead development of accurate and relevant information security process and operational metrics.
• Establish monitoring measures to detect and ensure correction of security breaches and policy violations.
• Proactively keep current on information security issues related to business processes as input into departmental policies and procedures.
• Analyze and enhance the effectiveness of the Enterprise wide information security program.

Skills

IT security concepts

Security governance

RBAC

Security risk assessment

Cloud security

Threat detection

SIEM

EDR (Crowdstrike)

Palo Alto Firewalls

Education

Bachelor's degree in Computer Science

Advanced degree in Information Security or related field

Tools

Palo Alto Networks

Prisma GlobalProtect VPN

Cisco Sourcefire

Cisco Stealthwatch

Cisco Identity Services Engine (ISE)

Secure Mail Gateway (ProofPoint)

Enterprise Proxy

Endpoint Protection Platforms

Data Loss Prevention (DLP)

FIM

Vulnerability Scanning Platforms

EDR (Crowdstrike)

Web Application Firewall (WAF)

CASB

Cloud Security Controls

Job description

Horizon Blue Cross Blue Shield of New Jersey is seeking a lead security analyst within IT Security Governance and IT Security Operations to oversee the administration, monitoring, and continuous improvement of critical security technologies. The role supports day-to-day cybersecurity operations, enterprise-wide initiatives, and audit readiness while guiding security controls across policies and procedures.

You will collaborate with cross-functional teams to protect PHI and member data in a