Lead IT Security Analyst

Shirley Ryan Ability Lab is the global leader in physical medicine and rehabilitation for adults and children with the most severe, complex conditions. By joining our team, you'll be part of our life-changing mission and vision. You'll contribute to an innovative, multifaceted culture that is second to none - one that embraces collaboration, excellence, discovery and compassion. You'll play a role in something that's never been done before as we integrate science and clinical care to help patients achieve better, faster outcomes - as we Advance Human Ability, together.

Job Description Summary

The Lead IT Security Analyst is a leader of the IT Security Operations team who works closely with the other members of the team to deliver a comprehensive information security program and safeguards Shirley Ryan Ability Lab's valuable information assets. The Lead IT Security Analyst holds a high level of expertise in multiple security focus areas, and works actively to disseminate that knowledge to the team.

The lead analyst works with other IT teams to effectively manage, monitor, and deploy technical controls to meet specific security requirements and follows defined processes and standards to ensure that security configurations are enforced and maintained. Where the Lead Analyst identifies opportunities for process improvements, they communicate them to management, propose changes, and implement them.

In a demanding 24x7x365 healthcare environment, this position requires a high degree of initiative and hands-on technical knowledge, an up-to-date understanding of the latest security threats and technologies, familiarity with core security frameworks, commitment to ongoing and continuous improvement of security personnel, processes, and technology, as well as a professional demeanor and collaboration skill set.

The IT Security Analyst will demonstrate Shirley Ryan Ability Lab Core Attributes (Communication, Accountability, Flexibility/Adaptability, Judgment/Problem Solving, Customer Service) and Core Values (Hope, Compassion, Discovery, Collaboration, and Commitment to Excellence) while fulfilling job duties.

Job Description

The Lead IT Security Analyst:

* Administers IT and OT systems relevant to security operations for all on-premises, hosted, and cloud infrastructure, storage, applications, systems, and networks.

* Cultivates knowledge of organizational policy and standards as they pertain to security and works to ensure that security operations are rooted in and aligned with policy, as well as promoting awareness of and adherence to policy among their own team and others. Where gaps in policy and standards are identified, the lead security analyst drafts proposed additions based on industry frameworks and best practices.

* Performs continuous monitoring of security solutions including but not limited to antivirus, encryption, endpoint detection and response, Security Incident and Event Management (SIEM), privileged access management, vulnerability management, threat intelligence, data loss prevention (DLP), and intrusion detection & prevention. Where gaps in detection or response capabilities are identified, the lead security analyst researches, evaluates, deploys or develops, and operationalizes new technologies to address them.

* Identifies security incidents in the course of monitoring; collaborates with internal and external teams to execute incident response procedures related to containment and eradication; and provides guidance to internal teams to recover from such incidents.

* Provides emergency, after-hours and weekend support on a rotational basis to respond to priority issues that occur outside of the normal business hours.

* Executes and proposes improvements to detailed and accurate documentation and procedures related to operational security practices and processes. Ensures users, service delivery and systems will adhere to documented standards. Where gaps in process are identified, the lead security analyst develops, implements, and trains team members on new solutions.

* Takes a leading role in conducting security awareness training and phishing simulations, and remains informed on industry trends and threat intelligence to ensure the organization is prepared to confront relevant threats.

* Provides direction to and collaborates with other teams regarding strategic and tactical operational security initiatives relating to identity and access management.

* Works closely with team members from IT, other business units, and vendors to ensure new systems, applications, subscriptions, services, and processes meet secure configuration and vulnerability management requirements.

* Evaluates vendor security assessments, coordinates periodic internal and external security audits and assists in the development and implementation of post-audit mitigation plans.

* Builds formal and informal relationships within SRAlab and among business partners and customers to improve the effectiveness of IT Security Operations.…