Information Security Analyst III Vulnerability Remediation Program Lead

DescriptionAs a not-for-profit organization, Mass General Brigham is committed to supporting patient care, research, teaching, and service to the community by leading innovation across our system. Founded by Brigham and Women’s Hospital and Massachusetts General Hospital, Mass General Brigham supports a complete continuum of care including community and specialty hospitals, a managed care organization, a physician network, community health centers, home care and other health-related entities. Several of our hospitals are teaching affiliates of Harvard Medical School, and our system is a national leader in biomedical research.We’re focused on a people-first culture for our system’s patients and our professional family. That’s why we provide our employees with more ways to achieve their potential. Mass General Brigham is committed to aligning our employees’ personal aspirations with projects that match their capabilities and creating a culture that empowers our managers to become trusted mentors. We support each member of our team to own their personal development—and we recognize success at every step.Our employees use the Mass General Brigham values to govern decisions, actions and behaviors. These values guide how we get our work done: Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other: Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration. The Opportunity:The Mass General Brigham (MGB) Information Security Analyst III Vulnerability Remediation Lead will be critical in developing and implementing vulnerability remediation procedures and prioritization to protect our hospital’s infrastructure and sensitive data. This role will be responsible for building and working closely with cross-functional teams to design, implement, and maintain security measures that will enhance the vulnerability remediation program to lower/mitigate risks where applicable. The ideal candidate will be technically minded with prior experience in one or more of the following areas:Vulnerability Management/RemediationRisk ManagementThreat IntelligenceData AnalyticsPRINCIPAL DUTIES AND RESPONSIBILITIES:· Develop an understanding of Mass General Brigham business applications, information security concepts and practices.· Leads the design and creation of new capabilities in remediating vulnerabilities· Integrate with and support the existing information security operations processes to evaluate, mitigate, and report on vulnerability remediation.· Work closely with application, infrastructure, and IT teams to ensure a structured approach to security. Facilitate and coordinate communication and collaboration across departments to ensure alignment with security goals.· Develop and mentor a team of security professionals and foster an environment of continuous improvement. Suggest direction for day-to-day work for select team members.Qualifications/* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal { margin:0in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }.MsoChpDefault { }@page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; }div.WordSection1 {page:WordSection1;} /* List Definitions */ /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal { margin:0in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }span.ui-provider { }.MsoChpDefault { }@page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; }div.WordSection1 {page:WordSection1;} /* List Definitions */ · Bachelor’s or Associate’s Degree or requisite experience· 7+ Years in Information Technology or Information Security required.· Healthcare experience preferred· Awareness of HIPAA, and other appropriate information security regulatory requirements for healthcare entities· Critical Thinking and problem-solving skills sufficient to identify and communicate key issues or understand when escalation support is required.· Expert Knowledge of multiple cybersecurity domains (NIST/ISO)· Technical skills sufficient to enhance tooling, and design new solutionsPREFERRED COMPETENCIES/* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal { margin:0in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; font-size:12.0pt; font-family:"Aptos",sans-serif; }.MsoChpDefault { }@page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; }div.WordSection1 {page:WordSection1;} /* List Definitions */ · Possess strong interpersonal skills to effectively communicate with cross functional teams· Strong time management and organizational skills required, project management skills are desired· Strong vocabulary, written and verbal communication and effective interpersonal skills is critical· Ability to work independently with appropriate supervision· Ability to successfully negotiate and collaborate with others of different skill sets, backgrounds an level within and external to the organization· Strong problem solving and critical thinking skills· Knowledge of business to allow customization of solutionsJob Field: Information SecurityOrganization: Mass General BrighamSchedule: Full-timeShift: Day JobEmployee Status: Regular