Senior IT Security Analyst

TridentCare; United States; Remote; USD 110,000 - 120,000; Full time

Job summary

TridentCare is seeking a Senior Information Security Analyst to assess information risk and coordinate remediation of vulnerabilities across the enterprise. You will work with IT, security teams and vendors to strengthen controls on networks, systems and applications.

Responsibilities include managing IT security and risk, supporting audits, developing policies to meet SOX, PCI and HIPAA guidance, planning security improvements, and mentoring junior staff.

Qualifications

• 5+ years of experience in information security or related IT roles.
• CISSP certification preferred.
• Associates degree in Computer Science or equivalent experience.
• Experience with security operations and incident response.
• Vulnerability management and threat analysis.
• Network and application security.
• Security architecture and risk assessments.
• Understanding of the NIST cybersecurity framework.
• Understanding of HIPAA compliance requirements.
• Strong communication and leadership abilities.

Responsibilities

• Manage IT security and IT risk (data systems, network and/or web) across the enterprise.
• Address questions from internal and external audits and examinations.
• Develop policies, procedures and standards that meet policy and regulatory requirements incl. SOX, PCI, HIPAA.
• Serve as a leader within IT security projects.
• Plan, implement, and upgrade security measures and controls.
• Maintain data and monitor security access.
• Manage network, intrusion detection and prevention systems.
• Recommend and install appropriate tools and countermeasures.
• Define, implement and maintain corporate security policies.
• Coordinate security plans with outside vendors.
• Maintain knowledge of new security trends and technologies.
• Other tasks as needed/determined.

Skills

Information security

Vulnerability management

Network security

Incident response

Security architecture

NIST framework

HIPAA compliance

Communication skills

Leadership

Team collaboration

Education

CISSP certification

Associate degree in Computer Science

Job description

• Pay or shift range: $110,000 USD to $120,000 USD The estimated range is the budgeted amount for this position. Final offers are based on various factors, including skill set, experience, location, qualifications and other job-related reasons.
• IT
• Full-Time
• Requisition #: SENIO031747

Description

The Sr. Information Security Analyst is responsible for assessing information risk and facilitates remediation of identified vulnerabilities for IT security and IT risk across the enterprise.Assesses information risk and facilitates remediation of identified vulnerabilities with the network, systems, and applications. Reports on findings and recommendations for corrective action.Performs vulnerability assessments as assigned utilizing IT security tools and methodologies.Performs assessments of the IT security/risk posture within the IT network, systems and softwareapplications. Identifies opportunities to reduce risk and documents remediation options regarding acceptance or mitigation of risk scenarios. Facilitates and monitors performance of risk remediation tasks, changes related to risk mitigation & reports on findings. Maintains oversight of IT and vendors regarding the security maintenance of their systems and applications. Liaise with other governance functions such Operations, IT, HR, Legal, and Compliance.

Key responsibilities including but not limited to:

• Management of IT security and IT risk (e.g., data systems, network and/or web) across the
  enterprise
• Address questions from internal and external audits and examinations
• Develop policies, procedures and standards that meet existing and newly developed policy
  and regulatory requirements including SOX, PCI, and/or HIPAA guidance
• Serve as a leader within IT security projects
• Plan, implement, and upgrade security measures and controls
• Maintain data and monitor security access
• Manage network, intrusion detection and prevention systems
• Recommend and install appropriate tools and countermeasures
• Define, implement and maintain corporate security policies
• Coordinate security plans with outside vendors
• Maintain knowledge of new security trends and technologies
• Other tasks as needed/determined

Education and Experience Requirements:

• 5+ years of experience in information security or related IT roles.
• Certified Information Systems Security Professional (CISSP) Certified (Preferred)
• Associates Degree in Computer Science or equivalent experience in on the job experience
• Proven experience with:
• Security operations and incident response
• Vulnerability management and threat analysis
• Network and application security
• Security architecture and risk assessments
  Excellent analytical and problem-solving abilities
• Strong communication skills for cross-functional collaboration
• Strong inter-personal, written, and oral communication skills including the ability to communicate complex technical issues to non-technical staff
• Ability to translate technical risks into business impacts
• Leadership and mentoring capabilities
• Demonstrated ability to work in teams and prioritize and manage competing work assignments in a time sensitive environment
• 1-2 experience with Networking, Microsoft Windows Enterprise systems, and security-related systems
• Understanding of NIST cybersecurity framework
• Understanding of HIPAA compliance requirements
• Strong troubleshooting skills

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.