Denver Health

Security Analyst

• In collaboration with infrastructure application teams and external department system administrators, implements and monitors organizational IT security policies and procedures, ensuring technical controls are enforced.
• Works with IT department managers and staff to ensure security issues are addressed as new equipment, facilities, systems, and software are installed.
• Develops processes for routine and requested internal audits of systems, applications, and data access including tools and techniques used to conduct audits.
• Conducts or coordinates audits on predefined schedule and when an audit is requested or indicated as part of an investigation.
• Documents audit findings and follows-up on access irregularities.
• Follows procedures and industry best practices for reporting and investigating IT related security incidents.
• Investigates and documents all reported or suspected security incidents. Maintains documentation of investigations and provides reports to the Chief Information Security Officer.
• Recommends implementation of corrective actions needed to mitigate security vulnerabilities.
• In coordination with Network/Server and Applications, develops procedures and technical controls to monitor appropriate administrator, end-user, vendor, and remote access to the Denver Health network, and IT systems.
• Investigates alerts to ensure that information is not altered or lost during storage, or transmission.
• Collaborates with the Project Management Office (PMO) on initiatives involving the IT Security program.
• Provide monthly metrics to the CISO and the IT Director of Information Security by the 3 rd business day of each month.
• Monitor and respond to help desk tickets within the documented Service Level Agreements (SLA).
• Maintain current documentation for all procedures and applications currently in use.
• Respond to all on-call notifications within required documented SLA’s.
• Responsible for periodically updating management, via written or verbal reports, on all issues, concerns, or problems related to the IT Security program.
• Monitors changes to applicable laws, industry standards, and regulatory or accreditation requirements, and incorporates requirements into the organization’s IT Security program.
• Plans and organizes time effectively. Integrate priority changes into work plans. Anticipates resource needs and plans accordingly.

IT Security Analyst II

Administration

• Under minimal supervision, the Business Applications Administrator will assist with maintaining the availability of vendor-supplied applications, processes, and reports.
• Is competent to work on most phases of application life cycle, reporting analysis, configuration, coding and/or support activities.
• Prepares detailed documentation and troubleshooting information for use and support of vendor-supplied applications.
• Devises or modifies procedures to solve problems considering software application limitations, operating time, and desired results.
• Manages the day-to-day operations of assigned systems applications, including client/server software, workstations, and infrastructure components.
• Communicates and intervenes appropriately with end users, departmental personnel, or with vendors to help resolve issues in a timely manner.
• Monitors and upholds data integrity.
• Ensures up to date documentation in the organization’s Configuration Management Database System (CMDB).
• Updates or revises as needed.
• Responds to email, voicemail, pager requests in a timely manner set forth by departmental policy.
• Creates, maintains, and follows detailed documentation processes to ensure cross functional knowledge sharing.
• Audits Analysts documentation prior to Change Advisory Board as needed.
• Implements change or performs necessary system changes.
• Presents system changes to Change Advisory Board.
• Attention to detail remains consistent.
• Plans and organizes time effectively while being able to constantly prioritize and reprioritize as necessary.
• Participates in a 24x7 Business Applications Team on-call rotation to resolve problems.