SR Information Security Analyst - IS-Mod - 80651

Mayo Foundation for Medical Education and Research; Rochester, Northern (MN, KY); Hybrid; USD 116,000 - 168,000; Full time

Job summary

Mayo Foundation for Medical Education and Research is hiring a Senior Information Security Analyst to lead complex security initiatives, provide enterprise risk insight, and advance the organization’s security program. This role operates with autonomy across multiple domains and mentors analysts within the Infrastructure Protection – Network Security team.

The role supports Vendor Remote Access onboarding, requiring strong customer service, analytical, and policy-aligned technical skills in a

Qualifications

• Master’s degree + 4 years of relevant experience OR Bachelor’s degree + 5 years of relevant experience.
• Fields of study: information security, computer science, information systems, risk management, or related field.
• One or more certifications (or equivalent) such as CISSP, CISM, GSEC, OSCP must be obtained at or within two years of hire.

Responsibilities

• Lead complex security initiatives and provide enterprise risk insight.
• Mentor analysts and lead cross-functional efforts within the IP-NS team.
• Advise business, clinical, and technology leaders with clear, actionable cybersecurity guidance.
• Support Vendor Remote Access onboarding and handle intake, provisioning, access validation, and partner communications.

Skills

Cybersecurity

Risk assessment

Stakeholder communication

Team leadership

Education

Master’s degree in applicable field

Bachelor’s degree in applicable field

Job description

Responsibilities

The Senior Information Security Analyst is an experienced cybersecurity professional responsible for leading complex security initiatives, providing enterprise risk insight, and advancing the organization’s information security program. This role operates with a high degree of autonomy and accountability across multiple security domains. Senior Analysts serve as trusted advisors to business, clinical, and technology leaders, translating cybersecurity and risk concepts into clear, actionable guidance. They lead security assessments, influence control design and risk treatment decisions, and contribute to the ongoing maturity of the security program in alignment with organizational objectives, regulatory requirements, and industry frameworks such as NIST and CISA. This position requires strong technical and risk expertise, effective communication skills, and the ability to mentor analysts, lead cross functional efforts, and drive continuous improvement.

This role serves as a senior analyst within the Infrastructure Protection – Network Security (IP-NS) team, supporting Vendor Remote Access (VRA) onboarding operations — including intake, provisioning, access validation, and customer communication for vendors and business partners using approved remote access tools. The successful candidate must bring strong customer service skills to consistently deliver a positive experience for internal and external stakeholders, paired with strong analytical and security skills. The role requires someone who is comfortable leading technical discussions and aligning technical requirements to policy. A self-starter mindset and a high level of personal organization are essential — this role balances competing priorities, external-facing service requests, and operational support with an on-call rotation. Ability to operate effectively in a hybrid work environment, including participation in on-site work-related events, team collaboration sessions, and key organizational activities as required.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Qualifications

Master’s degree in applicable field plus four (4) years of relevant experience preferred OR a Bachelor’s degree in applicable field plus five (5) years of relevant experience.

Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.

One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.

Exemption Status

Exempt

Compensation Detail

$116,043 - $168,292 / year

Benefits Eligible

Yes

Schedule

Full Time

Hours/Pay Period

80

Schedule Details

Monday - Friday Days This is a hybrid position and must be located within 100 miles of a Mayo Clinic campus for occasional on-site expectations based on business needs.

Weekend Schedule

on call rotation required

International Assignment

No