Security Analyst

Corewell Health; Grand Rapids (MI); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Comprehensive benefits

On-demand pay by Payactiv

Discounts directory

Identity theft protection (optional)

Retirement plan with matching

Job summary

Corewell Health is seeking a detail-oriented IT Controls Analyst to perform periodic reviews of controls and systems in support of regulatory, contractual, and compliance frameworks. You will document evidence, analyze findings, and communicate issues to business owners and leadership with clarity and relevance.

In this role, you’ll collaborate with teams to support internal and external security reviews and audits, assist with security policies and procedures, and help evaluate new technology

Qualifications

• Associate’s Degree/Technical or equivalent required.
• At least 2 years of relevant IT controls experience.
• Preferred: Bachelor’s Degree or equivalent; 3+ years of relevant experience.
• Experience monitoring IT controls or coordinating IT requests/audits in alignment with PCI, NACHA, SOC, NIST, HIPAA in healthcare.

Responsibilities

• Performs periodic review of IT controls and systems for regulatory/compliance requirements and contractual obligations.
• Documents information and evidence gathered, analyzes data, and draws conclusions.
• Supports internal and external security reviews and audits through testing and evidence gathering.
• Assists in creating and maintaining security policies, standards, and procedures; communicates to stakeholders.

Skills

IT controls

Audits coordination

Regulatory compliance

Education

Associate degree/Technical

Bachelor’s degree (preferred)

Job description

Job Summary

Performs periodic review of IT controls and systems in support of regulatory/compliance requirements, contractual obligations, and accepted frameworks. Documents information and evidence gathered in line with control requirements, performs appropriate analysis and draws logical conclusions. Collaborates to support internal and external security reviews and audits through testing and information and evidence gathering. Assists with the creation and maintenance of security policies, standards and procedures, and communication to relevant stakeholders for awareness and adherence. Partners with business and technical contacts in the evaluation of new or updated technology relevant to internal standards, compliance requirements and contractual obligations. Communicates information, requests and identified issues to business owners and leadership in a clear, concise and relevant manner based on audience. Leverages and supports related technologies based on work performed. Performs additional formal and informal assignments based on need. Remains accountable to assigned tasks, projects and deadlines.

Essential Functions

• Performs periodic review of IT controls and systems in support of regulatory/compliance requirements, contractual obligations and accepted frameworks.
• Documents information and evidence gathered in line with control requirements, performs appropriate analysis and draws logical conclusions.
• Collaborates to support internal and external security reviews and audits through testing and information and evidence gathering.
• Assists with the creation and maintenance of security policies, standards and procedures, and communication to relevant stakeholders for awareness and adherence.
• Partners with business and technical contacts in the evaluation of new or updated technology relevant to internal standards, compliance requirements and contractual obligations.
• Communicates information, requests and identified issues to business owners and leadership in a clear, concise and relevant manner based on audience.
• Leverages and supports related technologies based on work performed.
• Performs additional formal and informal assignments based on need.
• Remains accountable to assigned tasks, projects and deadlines.

Qualifications

Required

• Associate’s Degree/Technical or equivalent
• At least 2 years of relevant experience in the field

Preferred

• Bachelor’s Degree or equivalent
• 3 or more years of relevant experience in the field
• Experience monitoring IT controls or coordinating IT requests/audits in alignment with regulatory, compliance and audit frameworks. These include Payment Card Industry (PCI), National Association of Clearing House Association (NACHA), System and Organization Controls (SOC), National Institute of Standards (NIST), or Health Insurance Portability and Accountability Act (HIPAA), preferably in an integrated delivery system.

About Corewell Health

As a team member at Corewell Health, you will play an essential role in delivering personalized health care to our patients, members and our communities. We are committed to cultivating and investing in YOU. Our top-notch teams are comprised of collaborators, leaders and innovators that continue to build on one shared mission statement - to improve health, instill humanity and inspire hope. Join a nationally recognized health system with an ambitious vision of continued advancement and excellence.

How Corewell Health cares for you

• Comprehensive benefits package to meet your financial, health, and work/life balance goals. Learn more here.
• On-demand pay program powered by Payactiv
• Discounts directory with deals on the things that matter to you, like restaurants, phone plans, spas, and more!
• Optional identity theft protection, home and auto insurance
• Traditional and Roth retirement options with service contribution and match savings
• Eligibility for benefits is determined by employment type and status

Primary Location

SITE - Corewell Health Place - 100 Corewell Drive NW - Grand Rapids

Department Name

Governance and Compliance - Corporate

Employment Type

Full time

Shift

Day (United States of America)

Weekly Scheduled Hours

40

Hours of Work

8:00 a.m. to 5:00 p.m.

Days Worked

Monday to Friday

Weekend Frequency

N/A

Corewell Health is committed to providing a safe environment for our team members, patients, visitors, and community. We require a drug-free workplace and require team members to comply with the MMR, Varicella, Tdap, and Influenza vaccine requirement if in an on-site or hybrid workplace category. We are committed to supporting prospective team members who require reasonable accommodations to participate in the job application process, to perform the essential functions of a job, or to enjoy equal benefits and privileges of employment due to a disability, pregnancy, or sincerely held religious belief.

Corewell Health grants equal employment opportunity to all qualified persons without regard to race, color, national origin, sex, disability, age, religion, genetic information, marital status, height, weight, gender, pregnancy, sexual orientation, gender identity or expression, veteran status, or any other legally protected category.

An interconnected, collaborative culture where all are encouraged to bring their whole selves to work, is vital to the health of our organization. As a health system, we advocate for equity as we care for our patients, our communities, and each other. From workshops that develop cultural intelligence, to our inclusion resource groups for people to find community and empowerment at work, we are dedicated to ongoing resources that advance our values of diversity, equity, and inclusion in all that we do. We invite those that share in our commitment to join our team.