Information Security Analyst II

At Cincinnati Children’s, our Information Security team plays a critical role in protecting the systems, technologies, and data that support world‑class patient care, groundbreaking research, and life‑changing innovation. As an Information Security Analyst II, you will work alongside cross‑functional teams to strengthen and support the security infrastructure of one of the nation’s top pediatric healthcare organizations. This role offers the opportunity to contribute to enterprise‑wide security initiatives, support incident response efforts, analyze and implement technical solutions, and help safeguard the digital environment that powers clinical care and operational excellence across the organization.

If you are passionate about cybersecurity, problem‑solving, collaboration, and making a meaningful impact through technology, this is an opportunity to help change the outcome together at Cincinnati Children’s.

• Participate in the design, development, and implementation of systems to protect CCHMC data.
• Identify the appropriate resources needed to complete small projects.
• Support the communication between internal and external parties on project‑related issues and developments.
• Participate in developing and managing project plans.
• Determine the scope and complexity of small to midsized projects.
• Work with cross‑functional teams.
• Understand incident response processes and procedures and assist in mitigating incidents when they occur.

• Analyze, design, implement, and maintain moderately complex systems that greatly improve clinical care and patient management.
• Support system testing.
• Document testing outcomes.
• Work to develop technical solutions.
• Work to design, write, and prepare complete user and technical documentation.
• Analyze existing documentation and provide corrections and enhancements.
• Utilizes development lifecycle process, operating procedures and documentation to implement and support system solutions.

• Provide technical support and problem resolution assistance for production and process issues.
• Troubleshoot and decipher error messages.
• Identify required resources to resolve minor to midsized issues.
• Utilize appropriate Change Control methods to implement system solutions.
• Serve as a resource person for and liaise between Cincinnati Children’s departments and Information Services.
• Support departmental efforts to improve customer satisfaction.
• Evaluate and monitor system performance and functionality to avoid potential issues as well as gather information for future development needs or feasibility studies.
• Participate in on‑call support rotation and handle incident resolution, problem determination and resolution during that time.

• Ensure outstanding end‑user support is provided, including ongoing monitoring of Service Level Agreements for incident management and collaboration with other areas to ensure customer‑centered incident management and support.
• Adhere to and promote continual adoption of change management policies and procedures.
• Model outstanding customer service behavior, including timely and effective follow‑up with customers.

• Develop knowledge and professional skills through cross‑training, literature and attendance at department meetings and vendor education.
• Develop and maintain positive relationships, both internal and external to CCHMC.
• Motivate people and encourage teamwork.
• Work well with others and foster a positive team environment.
• Prepare oral and written presentations.
• Conduct and participate in instructional seminars.
• Develop expertise in several Cincinnati Children’s computer‑based systems.
• Perform other duties as assigned.

• Bachelor’s degree OR equivalent combination of education and experience.
• 2+ years of work experience in a related job discipline.

• Experience supporting cybersecurity operations within a healthcare, hospital, or highly regulated environment.
• Experience with security incident response, threat detection, and vulnerability management processes.
• Experience working with enterprise security tools such as SIEM, endpoint protection,…