Lead Cybersecurity Analyst

Lead Cybersecurity Analyst

You'll want to join Billings Clinic for our outstanding quality of care, exciting environment, interesting cases from a vast geography, advanced technology and educational opportunities. We are in the top 1% of hospitals internationally for receiving Magnet® Recognition consecutively since 2006.

And you'll want to stay at Billings Clinic for the amazing teamwork, caring atmosphere, and a culture that values kindness, safety and courage. This is an incredible place to learn and grow. Billings, Montana, is a friendly, college community in the Rocky Mountains with great schools and abundant family activities. Amazing outdoor recreation is just minutes from home. Four seasons of sunshine!

You can make a difference here.

Billings Clinic is a community-owned, not-for-profit, physician-led health system based in Billings with more than 4,700 employees, including over 550 physicians and non-physician providers. Our integrated organization consists of a multi-specialty group practice and a 304-bed hospital. Learn more about Billings Clinic and how we are recognized nationally for our exceptional quality.

Billings Clinic is proud to be recognized for nursing excellence as a Magnet®-designated organization, joining only 97 other organizations worldwide that have achieved this honor four times. The re-designation process happens every four years.

The Lead Cybersecurity Analyst provides advanced technical expertise and lead-level coordination for the protection of Billings Clinic's information systems, digital assets, networks, applications, and data. This position supports the proactive assessment, monitoring, analysis, and response to cybersecurity threats and vulnerabilities. The Lead Cybersecurity Analyst serves as a technical resource for cybersecurity operations, incident response, threat analysis, security controls, risk mitigation, and security best practices.

This role partners with Information Technology teams, operational leaders, vendors, compliance, privacy, and other stakeholders to evaluate cybersecurity risks, support secure technology solutions, and strengthen the organization's security posture. The position provides guidance to cybersecurity team members, supports prioritization of work, assists with escalation of complex issues, and promotes consistent cybersecurity practices across the organization.

• Cybersecurity Operations and Threat Monitoring

Leads and supports daily cybersecurity operations, including monitoring, analysis, investigation, and response to security events, alerts, vulnerabilities, and emerging threats. Analyzes cybersecurity events and determines potential impact to systems, operations, users, and the organization. Maintains awareness of the current cybersecurity threat landscape by reviewing threat intelligence, industry alerts, security advisories, internet postings, and other relevant sources. Identifies trends, recurring issues, and potential risks, and recommends actions to reduce exposure to malicious cyber activity.

Maintains and supports cybersecurity tools, monitoring systems, and related technologies used to protect the environment.

• Incident Response and Escalation

Determines whether monitored security events should be escalated to incidents and follows applicable incident response and reporting processes. Leads or supports cybersecurity incident response activities, including triage, containment, investigation, documentation, escalation, communication, and remediation follow-up. Provides technical guidance during cybersecurity events, system compromises, vulnerability concerns, and other high-risk security situations. Supports post-incident reviews and assists with identifying root causes, lessons learned, and process improvements.

Coordinates with Information Technology, Compliance, Privacy, leadership, vendors, and other stakeholders during cybersecurity incidents as appropriate.

• Security Controls, Risk Reduction, and Technical Consultation

Implements, monitors, and evaluates security controls to protect Billings Clinic systems, networks, data, applications, and digital assets. Provides cybersecurity consultation on IT…