Senior Information Security & Cyber Risk Analyst (Compliance, CISSP, CISM, CBCP, CHPS, CISA, HI

Senior Information Security & Cyber Risk Analyst

Location:

Vancouver, WA.

Full‑time, permanent position. Salary:
Excellent compensation with benefits, relocation assistance, and interview travel reimbursement.

Responsible for planning and implementing information security and cyber risk policies, procedures, standards, and controls across Peace Health. Facilitates cyber risk management activities, security risk assessments, and information security awareness. Evaluates ongoing use and performance of information security programs and processes. Provides support for internal and external security assessments, including gathering evidence, discussing findings, and tracking remediation activities.

• Collaborate with functional teams on cyber risks and Peace Health information security initiatives; solicit involvement of senior management to achieve cyber risk management goals.
• Lead and support enterprise‑wide information security and cyber risk assessments with technical and non‑technical teams.
• Identify and develop recommendations for information security and cyber risk issues and vulnerabilities; work with privacy, compliance, internal audit, legal, HR, IT, and other teams.
• Serve as an advisor and subject‑matter expert on identified information security and cyber risk matters, projects, or any other Peace Health initiative with security implications.
• Facilitate information security committees and work groups—schedule, coordinate, follow up, and report.
• Perform cyber management activities, security risk assessments, security‑related investigations, and provide information security awareness; conduct internal security and confidential information investigations and usage audits.
• Develop and maintain relevant cyber risk metrics to promote transparency; measure, monitor, and report on information security risks via governance committees and other meetings at Peace Health.
• Promote information security education and awareness across Peace Health.
• Perform other duties as assigned.

• Minimum 5–7 years of experience managing information security, cyber risk, and/or compliance activities.
• Experience working with security frameworks such as NIST CSF and HIPAA.
• Demonstrated experience across information security and cyber risk domains.
• Health‑care experience preferred.
• Experience in information security investigations preferred.

• Bachelor’s Degree in Information Systems, Information Technology, Computer Science, Information Security, or related field.
• Equivalent knowledge and skills obtained through a combination of education, training, and experience may also qualify.

• CISSP, CISM, CBCP, CHPS, CISA, or equivalent certification required.
• Must obtain one of these certifications within 12 months of hire if not already held.

• Excellent project management and written and oral communication skills.
• Ability to present information in textual, graphical, and statistical formats.
• Ability to collect and analyze data to guide decision making under pressure during security incidents.
• Collaborative skills with broad constituencies and effective solution orientation.
• Capability to work on highly sensitive and confidential matters with professionalism and discretion.
• Ability to work independently with limited supervision and guidance.
• Proficient with standard software (Microsoft, Windows, Outlook).

• Do you have at least five years of experience in managing information security, cyber risk, and/or compliance activities?
• Do you have healthcare experience?
• Do you have experience working with security frameworks such as NIST CSF or HIPAA?
• Do you have experience in information security investigations?
• Do you have demonstrated experience across information security and cyber risk domains?

Peace Health is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.