Lead Cyber Security Analyst

Job DescriptionUW Medicine IT Services has an outstanding opportunity for a Lead Cyber Security Analyst.WORK SCHEDULE100% FTEMonday – Friday; Core hours for UW Medicine IT Services are 8:00 – 5:00 (PST)Day ShiftDEPARTMENT DESCRIPTIONUW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.POSITION HIGHLIGHTS100% remote opportunity15 days of vacation your first year – Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year100% matching, 100% immediately vesting 403(b)PRIMARY JOB RESPONSIBILITIESSupporting the direction and priorities of the Manager by coordinating and overseeing the operational activities and ensuring standard services are meeting appropriate targets, including the following:Vulnerability and risk assessment activities with significant impact on business operations for all UW Medicine entities and vendorsDesign, development, and implementation of security tools, platforms, and methodologies drawing from industry requirements and frameworks such as HIPAA, HITRUST, and NIST to identify and mitigate risks to patient care and critical operationsImplementation and leveraging of prescribed tools to discover system and/or software vulnerabilities and inform and/or validate risk assessments throughout the enterpriseIntegrate threat information into enterprise vulnerability assessments, risk assessments, and mitigation activitiesOperating and updating UW Medicine’s risk register and risk management programDevelopment and delivery of user training, security awareness programs, and UW Medicine-wide security documentation such as policies, standards, and operating proceduresPrioritizing and distributing the workload throughout a team of Cyber Security Analysts, managing the day-to-day workflow, and reporting to the Manager the status of work assignmentsProviding a point of escalation for operational and other service issuesIdentifying and proposing service management improvementsProviding advice, coaching, and mentorship to team on work techniques, best practices, and operational expertiseServing as the Manager’s delegate to represent the team to customers, project managers, technical leadership, and organizational managementAreas of responsibility include, but are not limited to:Leading information security service delivery with a continuous improvement mindset and reporting metrics to directly impact business and leadership decisionsOverseeing team support for applications, infrastructure, and technology projects to ensure the use of secure designs and that technical solution architectures align with organizational risk management goalsConsulting with technical and non-technical stakeholders, including internal and external entities, on security best practices to reduce the risk of compromise across people, processes, and technologyMonitoring and developing monitoring to proactively identify and respond to threats, vulnerabilities, or risks within UW MedicineLeading efforts to track and mitigate known and emergent threats to UW Medicine to support institutional threat awareness, risk assessments, threat detection and analysis, incident response, and cyber security operationsCollaborating with Cyber Security Engineers in information security incident triage, containment, and investigative activities, as needed, as part of the incident management processMentoring other Analysts and team membersREQUIREMENTSBachelor's degree in Computer Science, Information Technology, Business Administration, or related field or equivalent combination of experience/education6+ years of experience must include:6+ years’ information security experience to include experience in several of the following areas: Risk Management, Audit, Compliance, Security Engineering, Project Management, Architecture, and Governance1+ year(s) of formal mentorship for technology professionalsDemonstrated experience leading team activities and initiatives in designing, implementing, or maintaining security tools (including threat assessment tools, risk management tools, or vulnerability management scanning systems)Demonstrated experience leading and mentoring others in security assessments, security control analysis, risk assessments, vulnerability assessments, or penetration tests of highly complex systems that support critical business operations (ex. Patient Care, Finance, HR)Advanced understanding of, and the experience mentoring others in, security-related technologies, systems, and toolsDemonstrated experience using, and the ability to lead a team in, threat modeling and vulnerability review to impact the design of highly interconnected enterprise systemsAdvanced understanding of information security threats and vulnerabilities and how they translate to risksAdvanced knowledge of common information security regulations and/or standards such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC and how to apply themDemonstrated experience leading service delivery, team activities, and initiativesABOUT UW MEDICINE – WHERE YOUR IMPACT GOES FURTHERUW Medicine is Washington’s only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine’s mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow’s physicians, scientists and other health professionals.All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.Become part of our team. Join our mission to make life healthier for everyone in our community.Compensation, Benefits and Position DetailsPay Range Minimum:$135,000.00 annualPay Range Maximum:$160,008.00 annualOther Compensation:-Benefits:For information about benefits for this position, visit Shift (United States of America)Temporary or Regular?This is a regular positionFTE (Full-Time Equivalent):100.00%Union/Bargaining Unit:Not ApplicableAbout the UWWorking at the University of Washington provides a unique opportunity to change lives – on our campuses, in our state and around the world. UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.Our CommitmentThe University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81.To request disability accommodation in the application process, contact the Disability Services Office at or Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.SummaryLocation: Seattle, WAType: Full time University of Washington