IT Security Analyst II

Summary

**Candidates must have a primary address located within the state of Michigan or willing to move to Michigan to be considered.**

The Data Security Analyst II manages, monitors, and maintains security access controls for an assigned set of users, systems, and applications. The person is responsible for a number of ongoing activities that serve to provide appropriate access to, and protect the confidentiality and integrity of, patient, provider, employee, and business information in compliance with organization policies and standards, regulatory requirements and sound business practices. This person also serves as a point contact regarding audit compliance and lead for annual security-related reviews.


Responsibilities

(25%)* Manage access privileges to systems, applications, and functions for assigned areas of responsibility. Including understanding the business needs as input into designing /developing security solutions to comply with the business.

(25%)* Report, review and audit adherence to established security policies and standards for assigned areas.

(25%)* Document security management procedures and communicate as necessary to others.

(25%)* Actively participate and lead in security and access management planning meetings, project teams, and workgroups as required. Continue to refine and improve security management practices, designing and implementing new standards and approaches as warranted by changes in the environment.

OTHER DUTIES AND RESPONSIBILITIES:

MyMichigan Health is a technology driven organization and employees need to demonstrate competency in Microsoft Windows. An employee may be required to participate in further learning opportunities offered by MyMichigan Health.


Certifications and Licensures

N/A


Required Education

Associate's degree is required

A Bachelor's Degree in a healthcare-related, information technology, or business field, or a minimum of an Associate's Degree in same areas with five years related experience including the design and administration of security processes in an enterprise environment is required.


Other Information

EXPERIENCE, TRAINING AND SKILLS:

A bility to analyze, design, recommend, monitor and improve information security related processes in a positive manner, balancing information users needs to access our systems and data with the need to maintain data integrity, confidentiality and reliability.

Tuberculosis (TB) testing must be done as required.

Mandatory Occupational Safety and Health Administration (OSHA) training must be completed annually according to the Exposure Control Plan.

PHYSICAL/MENTAL REQUIREMENTS AND TYPICAL WORKING CONDITIONS:

Exposure to stressful situations, including those involving public contact, as well as, trauma, grief and death.


Able to wear personal protective equipment that includes latex materials or appropriate substitute if required for your position.

Is able to move freely about facility with or without an assisted device and must be able to perform the functions of the job as outlined in the job description.


Overall vision and hearing is necessary with or without assisted device(s).

Frequently required to sit/stand/walk for long periods of time. May require frequent postural changes such as stooping, kneeling or crouching.


Some exposure to blood borne pathogens and other potentially infectious material. Must follow MyMichigan Health bloodborne pathogen and TB testing as required.


Ability to handle multiple tasks, get along with others, work independently, regular and predictable attendance and ability to stay awake.

Overall dexterity is required including handling, reaching, grasping, fingering and feeling. May require repetition of these movements on a regular to frequent basis.


Physical Demand Level: Sedentary. Must be able to occasionally (0-33% of the workday) lift or carry 0-10 lbs.