Perform all necessary duties to ensure the safety of digital assets and to protect systems from intentional or inadvertent access
Provide input to solutions to identified needs, meeting specific operational and business objectives, technology capabilities
Provide technical expertise and support to clients, IT management, and staff in risk assessments, implementation, and operational aspects of appropriate Cybersecurity procedures and products
Manage third-party and supplier risk across all domains and embed supplier risk requirements into continuity management tools
Monitor specific Cybersecurity solutions for efficient and appropriate operations and ensure Analysts receive and analyze alerts from various enterprise level sensors
Collaborate on IT projects to ensure that security issues are addressed throughout the project life cycle
Research and assess new threats and security alerts and recommend remedial action
Participate in Cybersecurity projects, including planning, obtaining customer input and projecting resource requirements
Review security system requirements with customers and translate requirements into specific functions or deliverables
Analyze and integrate security solutions into multiple platforms, including clinical and financial systems
Analyze flow chart processes and recommend ways to reduce steps and increase efficiency through use of technology
Coach or provide guidance to lower-level Cybersecurity Analysts and support optimizing department resources
Communicate security procedures and policies with caregivers and weigh business needs against security concerns
Provide after-hours support as needed
Requirements
High School diploma/GED and minimum 7 years of Information, Clinical or Financial Systems experience required, including directing, planning and scheduling a major information system project, with at least 3 years of Cyber Security experience
OR bachelor's degree and minimum or 5 years of Information, Clinical or Financial Systems experience required, including directing, planning and scheduling a major information system project, with at least 3 years of Cyber Security experience
ITIL Foundations Certification required upon or within six months of hire
Excellent knowledge of security technology and strong analytical skills
Understanding of networking/distributed computing environment concepts
Requires familiarity with domain structures, user authentication mechanisms and fundamental cryptography
In-depth knowledge of intrusion detection and data correlation
Practical knowledge of network topology and the underlying OSI model
Understands principles of client/server configuration
Preferred: Bachelor's degree in information technology/computer science or related field
Preferred certifications: SANS, (ISC)2, CompTIA or other position related certifications
Preferred: Certified Fraud Examiner, Associate Cyber Resilience Professional – Disaster Recovery Institute International, Completed Cisco Threat Hunting Workshop 5.2, U.S. Dept. of Homeland Security FEMA CDP, Healthcare Leadership, Toastmasters' International certification or 2+ years of membership
Demonstrated experience implementing and aligning cybersecurity initiatives with third party risk management
Demonstrated experience developing and conducting live tabletop workshops and exercises
Demonstrated experience in documenting and auditing business continuity and supplier business continuity plans
Experience developing and delivering pillar strategies, project plans, proof of concept cases, and reporting results
Experience delivering presentations to medium- large size audiences on compliance assessments, information security, and digital security topics
10+ years of progressive experience in business resilience, third party exit strategy planning, working with federal agencies, and cross-functional project leadership (preferred)
Proven success as a trusted advisor to executive stakeholders, including direct engagement with CISO level
Ability to perform work in a stationary position for extended periods and travel throughout the hospital system
Ability to operate a computer and other office equipment and communicate accurately