Lead Cyber Security Analyst

Job Description UW Medicine IT Services has an outstanding opportunity for a Lead Cyber Security Analyst.

WORK SCHEDULE
100% FTEMonday – Friday;
Core hours for UW Medicine IT Services are 8:00 – 5:00 (PST)
Day ShiftDEPARTMENT DESCRIPTIONUW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine.  UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW).  ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.

POSITION HIGHLIGHTS
100% remote opportunity
15 days of vacation your first year – Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year
100% matching, 100% immediately vesting 403(b)
PRIMARY JOB RESPONSIBILITIES Supporting the direction and priorities of the Manager by coordinating and overseeing the operational activities and ensuring standard services are meeting appropriate targets, including the following:

Vulnerability and risk assessment activities with significant impact on business operations for all UW Medicine entities and vendors

Design, development, and implementation of security tools, platforms, and methodologies drawing from industry requirements and frameworks such as HIPAA, HITRUST, and NIST to identify and mitigate risks to patient care and critical operations

Implementation and leveraging of prescribed tools to discover system and/or software vulnerabilities and inform and/or validate risk assessments throughout the enterprise

Integrate threat information into enterprise vulnerability assessments, risk assessments, and mitigation activities

Operating and updating UW Medicine’s risk register and risk management program

Development and delivery of user training, security awareness programs, and UW Medicine-wide security documentation such as policies, standards, and operating procedures

Prioritizing and distributing the workload throughout a team of Cyber Security Analysts, managing the day-to-day workflow, and reporting to the Manager the status of work assignments

Providing a point of escalation for operational and other service issues

Identifying and proposing service management improvements

Providing advice, coaching, and mentorship to team on work techniques, best practices, and operational expertise

Serving as the Manager’s delegate to represent the team to customers, project managers, technical leadership, and organizational management

Areas of responsibility include, but are not limited to:

Leading information security service delivery with a continuous improvement mindset and reporting metrics to directly impact business and leadership decisions

Overseeing team support for applications, infrastructure, and technology projects to ensure the use of secure designs and that technical solution architectures align with organizational risk management goals

Consulting with technical and non-technical stakeholders, including internal and external entities, on security best practices to reduce the risk of compromise across people, processes, and technology

Monitoring and developing monitoring to proactively identify and respond to threats, vulnerabilities, or risks within UW Medicine Leading efforts to track and mitigate known and emergent threats to UW Medicine to support institutional threat awareness, risk assessments, threat detection and analysis, incident response, and cyber security operations

Collaborating…