Information Security Analyst - (Onsite & Remote (hybrid) working schedule required)

Information Security Analyst Location: Truman Support Center, University Health Truman Medical Center, Kansas City, Missouri Department: IT Security Position Type: Full time Schedule: 8:00 AM – 4:30 PM, 40 hours per week (hybrid onsite/remote schedule required) At University Health KC, cybersecurity is more than technology - it's about protecting patients, safeguarding critical healthcare systems, and ensuring trust across every interaction. We are seeking a driven and highly analytical Information Security Analyst to help strengthen and advance our enterprise security program. In this role, you'll work at the intersection of healthcare, technology, compliance, and risk management to defend systems that directly support patient care and organizational operations. This is an opportunity for an IT security professional who thrives in a mission‑critical environment, enjoys solving complex security challenges, and wants to make a measurable impact in a rapidly evolving healthcare ecosystem. Why This Role Matters Healthcare is one of the most targeted industries for cyber threats. As part of our Information Security team, you'll play a key role in protecting sensitive patient information, securing enterprise infrastructure, supporting regulatory compliance, and helping shape the future of cybersecurity across our organization. You won't just respond to threats - you'll help prevent them. What You'll Do Enterprise Security Operations Support and maintain enterprise security technologies and infrastructure in collaboration with strategic technology partners Assist in maintaining high availability, resiliency, and operational security performance Participate in system maintenance activities and ongoing security optimization initiatives Risk Assessment & Security Compliance Evaluate new applications, systems, and technologies for alignment with security standards and best practices Support security risk assessments, audits, and remediation activities Help ensure compliance with HIPAA Security and Privacy standards, NIST frameworks, and organizational policies Threat Monitoring & Incident Response Analyze security reports, system logs, alerts, and audit findings to identify potential security threats or violations Coordinate and support information security incident investigations and reporting efforts Assist with vulnerability identification and mitigation across enterprise environments Security Awareness & Collaboration Promote a culture of cybersecurity awareness through education, training, and communication Partner with technical and operational teams to improve security posture organization-wide Collaborate with internal stakeholders and external technology providers to strengthen security operations What You Bring Minimum Qualifications Bachelor's degree in Information Technology, Cybersecurity, or related field - or equivalent combination of education, training, and experience Minimum of 2 years of information security experience plus 5 years of professional-level IT experience Strong understanding of information security principles, technologies, and operational practices Knowledge of HIPAA Security & Privacy requirements and NIST frameworks Experience identifying and mitigating network and infrastructure vulnerabilities Familiarity with: Cisco firewalls Splunk Antivirus platforms Intrusion Detection/Prevention Systems (IDS/IPS) Linux and Windows environments Strong communication, analytical thinking, and independent decision-making skills Preferred Qualifications Industry certifications such as:

CISSP

CISM CISA CHPC Healthcare industry experience Experience working in regulated or mission‑critical environments #J-18808-Ljbffr University Health