Information Security - Sr. Security Analyst - 40hrs

JOB DESCRIPTION

Reporting to the Director of Information Security, the Security Analyst manages security mechanisms to protect computer assets against hackers, external and internal breaches, viruses, spyware, and malware by establishing, enforcing, and monitoring appropriate security controls. The analyst responds to security incidents, investigates violations, provisions user accounts, and recommends enhancements to mitigate risk. The analyst is also an active participant in disaster preparedness and business continuity. Responsibilities Receives escalated requests/tickets, analyzes and troubleshoots complex security problems, and develops creative solutions, documenting resolved issues. Develops role-based security profiles with department, system engineers, and application analysts, ensuring appropriate access based on job requirements. Configures Active Directory settings and Identity Management functions per the overall IS and CCMC security posture and framework. Participates in the enhancement of security procedures to reduce turnaround on security requests, implementing new procedures utilizing parallel processes, Single Sign-On, and Two-Factor authentication. Executes processes that disable and clean up unused, old, and expired accounts following best security practices. Safeguards computer files through participation in disaster preparedness and business continuity exercises, recommending improvements. Participates in the evaluation, selection, and implementation of virus, malware, and other security software in collaboration with Workstation Support and System Engineer teams. Participates in continuing education programs that communicate changing security practices, procedures, and standards to employees, providers, and team members. Analyzes systems for security breaches and reports discrepancies to Security Leadership immediately, documenting identified issues. Conducts vulnerability assessments and penetration tests on IT systems, assessing results and reporting gaps to Security Leadership. Helps the IS team develop processes and procedures to comply with Corporate Compliance policies. Determines security violations and inefficiencies by actively auditing and monitoring computer systems and accounts. Provides on‑call support as required. Performs all duties of a Security Analyst and other related duties as assigned. Work Environment Requires on‑call rotation duties. Qualifications Education and/or Experience Required BA degree in Computer Science or related field preferred; 3–5 years of information security experience, or equivalent experience. Experience with Epic and a background in Healthcare highly desired. License and/or Certification Required CISA or Security+ certification is a plus. Knowledge, Skills, and Abilities Required Five years of relative IT experience. System administration and network security knowledge. Workstation, application, and database security experience. Risk identification and analysis principles. Regulatory standards such as HIPAA Privacy and Security Rule, HITECH, SOX, PCI/DSS. Information security policies and procedures. Familiarity with healthcare industry security standards and compliance requirements. Knowledge of Microsoft Windows Server, XP, and 7 desktop OS; database knowledge; Microsoft Office Suite; SIEM processes; change control management. Excellent communication skills, attention to detail, problem solving, customer focus, prioritization, and multi‑tasking. Project management skills and strong analytical abilities. Ability to work independently and complete tasks timely. #J-18808-Ljbffr Connecticut Children's