IT Security Analyst

Oversees the daily management of LRHS cybersecurity program. Assessing cybersecurity risk and facilitates remediation of identified vulnerabilities with hardware, network, systems, workforce and applications. Performing assessments of the IT security/risk posture within the network, systems, and software applications in addition to assessments within the Vendor Management Program. Performing vulnerability assessments utilizing IT security tools and methodologies. Identifying opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios.

Facilitating and monitoring the performance of risk remediation tasks and changes related to risk mitigation. Reporting findings and making recommendations for corrective action and/or improvements.

Maintaining oversight of IT and vendors regarding security maintenance of their systems and applications. Establishes and maintains relationships with other department(s) regarding information technology (OT) systems, documents and incorporates OT systems into cybersecurity policies and procedures. Providing regular status reports that include outstanding issues.

Assisting in all IT audits, risk assessments and regulatory compliance matters. Performing IT security and risk assessments across the enterprise (e.g., data systems, network and/or web). This includes Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, and Forensic Analysis. Facilitating and monitoring IT Security incident management and response. Addressing questions from internal and external audits and examinations.

Providing guidance and best practice recommendations for IT security policies, procedures, and standards that meet regulatory requirements, including HIPAA and PCI. Creating and facilitating IT security/risk training curriculum for the enterprise.

Serving as project manager/lead for IT security projects. Leading IT architecture security risk assessments and developing solutions/processes. In collaboration with the CIO and Manager of IT, they create, maintain and evaluate a comprehensive set of cybersecurity policies and processes including disaster recovery and business continuity.

Education: Bachelor’s degree in Computer Information Systems or a minimum of 3 years of equivalent IT system administration.

An annual influenza vaccination is required.

We offer a competitive compensation package that includes excellent benefits.