Sr. Information Security Analyst
Listed on 2026-10-08
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Point
32
Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point
32
Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are.
We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.
This position is responsible for analyzing the information security environment for Point
32
Health and developing security measures to safeguard the confidentiality, integrity, and availability of corporate information and data. In this role you will be expected to implement, monitor, assess and report on IT security, under guidance of senior staff. Reporting to the Cybersecurity Manager, the Security Analyst will be responsible for the administration, governance, and continuous improvement of the organization's Identity and Access Management (IAM) and Identity Governance programs.
The ideal candidate will possess strong expertise in access governance, user lifecycle management, access certifications, role-based access control (RBAC), privileged access oversight, and regulatory compliance requirements. This individual will partner closely with business stakeholders, application owners, auditors, and IT teams to ensure access is appropriate, compliant, and aligned with security best practices.
Consult with Security and Infrastructure Services staff to evaluate and implement software systems that provide appropriate security.
Communicate potential security exposures, misuse, or noncompliance situation to appropriate managers.
Monitor security logs to identify potential security related events.
Capture and report security metrics.
Monitors security trends and assess potential uses of new technologies to meet identified business goals.
Analyze business requirements and risks to technology implementation for security-related issues.
Develop and produce systems monitoring and metrics reports and assess the content.
Work with Technical Writers to document and review security policy and procedures.
Participate in audits both internal and external as required.
As required, participate on project teams, and manage the completion of all assigned project related tasks.
Train information owners in the implementation of necessary security controls by developing and presenting information security awareness.
Other duties as assigned.
Qualifications – what you need to perform the job Certification and LicensureEducation Required (minimum):
Bachelor’s degree in computer science with emphasis on IT security required or equivalent experience.
Preferred:
Master’s degree
5-7 years of professional experience
Preferred: 5-7 years in systems security, including maintenance and use of security products in a distributed enterprise environment, and experience in compliance with federal security regulations.Skill Requirements Specific working knowledge of and experience in the following work environments:
Identity and Access Management
SailPoint Identity Management
Ping Federate
Site Minder/Identity Manager/Provisioning Manager
Cyber Ark PAM
Cloud security
Active Directory
LDAP Directory Services
Perl,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).