Information Security Analyst - Information Technology - Salary

In an environment of continuous quality improvement, the Information Security Analyst is responsible for planning and implementing security measures and standards to protect computer systems, networks and data. This position monitors computer networks for security issues, install security software, fix detected vulnerabilities and document any security issues or breaches. Exhibits the MHS Standards of Excellence and exercises strict confidentiality at all times.

Job Functions:

1. Monitors all computer networks for security issues.
2. Documents event analysis and writes comprehensive reports of incident investigations.
3. Installs security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
4. Works with networking and system administration teams to perform tests and uncover vulnerabilities.
5. Fixes detected vulnerabilities to maintain a high-security standard.
6. Assists with containment of threats and remediation of environment during or after an incident.
7. Develops company-wide best practices for IT security.
8. Performs penetration testing.
9. Helps colleagues install security software and understand information security management.
10. Researches security enhancements and make recommendations to management.
11. Stays up-to-date on information technology trends and security standards.
12. Assumes all other duties and responsibilities as necessary.

Minimum Education/Experience Required:

• Bachelor’s Degree in Computer Science or related field required.
• In lieu of education, may consider a minimum of two years of experience in a Security Operations Center or Cyber Security Incident Response Team; or a minimum of five years in an infrastructure supporting or networking role required.
• Minimum of one year of experience in a technical support role or in computer network penetration testing and techniques preferred.
• Experience in supporting network investigations and managing cases with enterprise SIEM or Incident Management systems preferred.
• Security certifications (e.g. Security+, GCIA, GCIH, CISSP, CEH, CISA) preferred.

Special Knowledge, Skills, Training:

• Knowledge of HIPAA, PCS, and other regulatory standards such as NIST.
• Understanding of firewalls, proxies, antivirus, and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.
• Ability to demonstrate analytical expertise, close attention to detail, excellent critical thinking, logic, and adaptive learning.

Compensation Details:  Education, experience, and tenure may be considered along with internal equity when job offers are extended.
 

Benefits:  Memorial Health System is proud to offer an affordable, comprehensive benefit package to all full time and flex time employees.  To learn more about the many benefits we offer, please visit our website at www.mhsystem.org/benefits.

Bonus Eligibility:  Available to qualifying full or flex time employees. Eligibility will be determined upon offer.

Memorial Health System is an equal opportunity provider and employer.

If you wish to file a Civil Rights program complaint of discrimination, complete the USDA Program Discrimination Complaint Form, found online at https://www.ocio.usda.gov/document/ad-3027, or at any USDA office, or call (866) 632-9992 to request the form. You may also write a letter containing all of the information requested in the form. Send your completed complaint form or letter to us by mail at U.S. Department of Agriculture, Office of the Assistant Secretary for Civil Rights, 1400 Independence Avenue, S.W., Stop 9410, Washington, D.C. 20250-9410, by fax (202) 690-7442 or email at program.intake@usda.gov.

* Memorial Health System is a federal drug-free workplace.  This policy prohibits marijuana use by employees.