Security Analyst

Job Summary Performs periodic review of IT controls and systems in support of regulatory/compliance requirements, contractual obligations, and accepted frameworks. Documents information and evidence gathered in line with control requirements, performs appropriate analysis and draws logical conclusions. Collaborates to support internal and external security reviews and audits through testing and information and evidence gathering. Assists with the creation and maintenance of security policies, standards and procedures, and communication to relevant stakeholders for awareness and adherence. Partners with business and technical contacts in the evaluation of new or updated technology relevant to internal standards, compliance requirements and contractual obligations. Communicates information, requests and identified issues to business owners and leadership in a clear, concise and relevant manner based on audience. Leverages and supports related technologies based on work performed. Performs additional formal and informal assignments based on need. Remains accountable to assigned tasks, projects and deadlines. Essential Functions Performs periodic review of IT controls and systems in support of regulatory/compliance requirements, contractual obligations and accepted frameworks. Documents information and evidence gathered in line with control requirements, performs appropriate analysis and draws logical conclusions. Collaborates to support internal and external security reviews and audits through testing and information and evidence gathering. Assists with the creation and maintenance of security policies, standards and procedures, and communication to relevant stakeholders for awareness and adherence. Partners with business and technical contacts in the evaluation of new or updated technology relevant to internal standards, compliance requirements and contractual obligations. Communicates information, requests and identified issues to business owners and leadership in a clear, concise and relevant manner based on audience. Leverages and supports related technologies based on work performed. Performs additional formal and informal assignments based on need. Remains accountable to assigned tasks, projects and deadlines. Qualifications Required Associate’s Degree/Technical or equivalent At least 2 years of relevant experience in the field Preferred Bachelor’s Degree or equivalent 3 or more years of relevant experience in the field Experience monitoring IT controls or coordinating IT requests/audits in alignment with regulatory, compliance and audit frameworks. These include Payment Card Industry (PCI), National Association of Clearing House Association (NACHA), System and Organization Controls (SOC), National Institute of Standards (NIST), or Health Insurance Portability and Accountability Act (HIPAA), preferably in an integrated delivery system. About Corewell Health As a team member at Corewell Health, you will play an essential role in delivering personalized health care to our patients, members and our communities. We are committed to cultivating and investing in YOU. Our top-notch teams are comprised of collaborators, leaders and innovators that continue to build on one shared mission statement - to improve health, instill humanity and inspire hope. Join a nationally recognized health system with an ambitious vision of continued advancement and excellence. How Corewell Health cares for you Comprehensive benefits package to meet your financial, health, and work/life balance goals. Learn more here. On-demand pay program powered by Payactiv Discounts directory with deals on the things that matter to you, like restaurants, phone plans, spas, and more! Optional identity theft protection, home and auto insurance Traditional and Roth retirement options with service contribution and match savings Eligibility for benefits is determined by employment type and status Primary Location SITE - Corewell Health Place - 100 Corewell Drive NW - Grand Rapids Department Name Governance and Compliance - Corporate Employment Type Full time Shift Day (United States of America) Weekly Scheduled Hours 40 Hours of Work 8:00 a.m. to 5:00 p.m. Days Worked Monday to Friday Weekend Frequency N/A Corewell Health is committed to providing a safe environment for our team members, patients, visitors, and community. We require a drug-free workplace and require team members to comply with the MMR, Varicella, Tdap, and Influenza vaccine requirement if in an on-site or hybrid workplace category. We are committed to supporting prospective team members who require reasonable accommodations to participate in the job application process, to perform the essential functions of a job, or to enjoy equal benefits and privileges of employment due to a disability, pregnancy, or sincerely held religious belief. Corewell Health grants equal employment opportunity to all qualified persons without regard to race, color, national origin, sex, disability, age, religion, genetic information, marital status, height, weight, gender, pregnancy, sexual orientation, gender identity or expression, veteran status, or any other legally protected category. An interconnected, collaborative culture where all are encouraged to bring their whole selves to work, is vital to the health of our organization. As a health system, we advocate for equity as we care for our patients, our communities, and each other. From workshops that develop cultural intelligence, to our inclusion resource groups for people to find community and empowerment at work, we are dedicated to ongoing resources that advance our values of diversity, equity, and inclusion in all that we do. We invite those that share in our commitment to join our team. #J-18808-Ljbffr