Senior InfoSec Risk Analyst – Zero Trust & Cloud

Westchester Medical Center; Town of Mount Pleasant (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

Westchester Medical Center is seeking a senior Risk Analyst II to lead design, implementation and management of enterprise security solutions within the Digital Transformation Information Services Information Security team. The role enforces network security policies across firewalls, cloud controls, IAM and EDR, with a focus on zero-trust and secure remote access.

You will collaborate with IT and clinical teams, mentor junior staff, and document incident responses from detection to remediation

Qualifications

• Minimum 5-7 years IT Infrastructure or IT Security experience, required.
• Hands-on experience with Cisco security technologies, including SNA/Stealthwatch and ISE.
• Bachelor’s degree in information technology, Information Security, or related discipline.
• CISSP or equivalent industry certification, required.

Responsibilities

• Design, implement, and manage enterprise security solutions, including Cisco security platforms (SNA/Stealthwatch, ISE, AnyConnect, Firepower, Umbrella).
• Configure, maintain, and optimize Palo Alto Networks firewalls to enforce network security policies.
• Administer and enhance email security and filtering solutions to protect against phishing, malware, and data loss.
• Design and maintain cloud security controls, including policy enforcement, continuous monitoring, and compliance validation.
• Architect and support network segmentation initiatives aligned with zero-trust architecture principles.
• Deploy and manage zero-trust/SASE secure remote access solutions.
• Administer IAM controls, ensuring strong authentication, least privilege, and secure access governance.
• Manage Microsoft EntraID capabilities, including Conditional Access policies and MFA.
• Deploy, monitor, and respond to alerts from CrowdStrike (EDR).
• Support OT/IoT/Medical device security initiatives to enhance visibility, vulnerability identification, remediation, and risk reduction.

Skills

Network security design

Zero-trust architecture

Incident response

Threat monitoring

Vulnerability management

Security policy enforcement

Remote access security

Cisco security technologies

SNA/Stealthwatch

ISE

Microsoft EntraID

MFA/Conditional Access

EDR/CrowdStrike

Education

Bachelor's degree in information technology, Information Security, or related/relevant discipline

Tools

Palo Alto firewalls

Cisco security platforms

Microsoft Entra

CrowdStrike EDR

Job description

Westchester Medical Center is seeking a senior Risk Analyst II to lead design, implementation and management of enterprise security solutions within the Digital Transformation Information Services Information Security team. The role enforces network security policies across firewalls, cloud controls, IAM and EDR, with a focus on zero-trust and secure remote access.

You will collaborate with IT and clinical teams, mentor junior staff, and document incident responses from detection to remediation