Security Analyst - Must reside in CA, or be willing to relocate

Institute on Aging; San Francisco (CA); On-site; USD 130,000 - 134,000; Full time

Job summary

Institute on Aging (IOA) is seeking a senior IT security professional to assess and mitigate risk across our networks, systems and applications in a healthcare setting. You will lead IT security projects, guide policy improvements, and partner with audit teams to ensure HIPAA, HITRUST and PCI compliance.

The role requires 4+ years of security experience, strong risk and governance capabilities, and hands-on work managing security controls in a complex environment.

Qualifications

• Associates degree or higher in Information Systems, CS, Information Security, or related discipline.
• 4+ years of IT security or information security experience.
• 2+ years of IT compliance assessments (HIPAA, HITRUST, PCI, etc.).
• 2+ years of experience administering IT security controls.
• Demonstrated knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.

Responsibilities

• Assess information risk and remediate vulnerabilities in IOA's networks, systems, and applications.
• Perform vulnerability assessments utilizing IT security tools and methodologies.
• Assess IT security/risk posture within the network, systems, and software applications; vendor management.
• Identify opportunities to reduce risk and document remediation options.
• Facilitate and monitor risk remediation tasks and changes related to risk mitigation.
• Report findings and provide recommendations for corrective action.
• Provide oversight of IT and vendors regarding security maintenance of systems and applications.
• Support IT audits, risk assessments, and regulatory compliance matters.
• Perform IT security and risk assessments across data systems, networks, and web applications.
• Lead IT security projects and develop security solutions/processes.

Skills

Interpersonal communication

MS Office proficiency

Windows administration

Education

Associates degree or higher in Information Systems, Computer Science, Information Security, or related discipline

Tools

IPS/IDS

SIEM

Windows Server

Windows Desktop

Job description

IOA is on the forefront of revolutionary healthcare models, reshaping the way people can age in place. Our innovative models transform lives, enhance communities, and save healthcare systems millions of dollars. Rather than focusing on archaic outdated design, we strive to consistently question the "status-quo" and create new and more innovative ways to help aging adults and adults with disabilities maintain their quality of life. With over 23 programs, we offer multiple ways to aid seniors maintain their health, well-being, independence and participation in the community, fulfilling our mission.

Key duties and responsibilities of the position include, but may not be limited to:

• Assessing information risk and facilitates remediation of identified vulnerabilities with IOA's network, systems, and applications
• Performing vulnerability assessments utilizing IT security tools and methodologies
• Performing assessments of the IT security/risk posture within the network, systems, and software applications, in addition to assessments within the Vendor Management Program
• Identifying opportunities to reduce risk and documents remediation options regarding acceptance or mitigation of risk scenarios
• Facilitating and monitoring the performance of risk remediation tasks and changes related to risk mitigation
• Reporting findings and making recommendations for corrective action
• Maintaining oversight of IT and vendors regarding the security maintenance of their systems and applications
• Providing regular status reports that include outstanding issues
• Assisting in all IT audits, risk assessments and regulatory compliance matters
• Performing IT security and risk assessments across the enterprise (e.g., data systems, network and/or web).
• This includes Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, and Forensic Analysis
• Facilitating and monitoring IT Security incident management and response
• Addressing questions from internal and external audits and examinations
• Providing guidance and best practice recommendations for IT security policies, procedures, and standards that meet regulatory requirements, including HIPAA, SOC2, HITRUST, and PCI
• Creating and facilitating IT security/risk training curriculum for the enterprise
• Serving as project manager/lead for IT security projects
• Leading IT architecture security risk assessments and developing solutions/processes

REQUIRED QUALIFICATIONS

• Associates degree or higher in Information Systems, Computer Science, Information Security, or related discipline
• 4+ years of IT security or information security experience
• 2+ years of experience conducting IT compliance assessments (e.g., HIPAA, HITRUST, PCI, etc.)
• 2+ years of experience administering IT security controls
• Demonstrated knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk
• Experience with IPS/IDS and SIEM technologies
• Windows workstation and server administration experience
• Experience producing and reviewing security reports, findings, and metrics
• Excellent interpersonal, oral, and written communication skills
• Excellent MS Office skills

COMPENSATION:

Range: $ 130,000 to $134,000/annual
This amount is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on actual experience, education and other factors.
This range does not include any additional equity, benefits, or other non-monetary compensation which may be included.

A job with benefits that goes above and beyond.

From competitive salaries to investment and retirement opportunities, we offer our employees first-rate benefits. Coupled with outstanding health coverage, robust wellness programs, and additional perks, we make a rewarding career even more rewarding.