Role: Cyber Security Analyst III
Location : Phoenix, AZ
Duration: Contract
Job Description :
The Security Analyst III, Cyber Fusion Advancement position will report to the Vice President, Cyber Fusion Center which is focused on identifying, protecting, responding and containing threats and Vulnerabilities to the overall CommonSpirit organization.
The expectations for this position are:
- Lead service line support for threat remediation, engagement, and escalation of moderate complexity issues.
- Facilitate significant Fusion huddles across multiple teams both technical and non-technical, being able to present ideas and themes, solicit feedback and develop action plans for follow-up.
- Drive coordination of complex threat remediation efforts into agile sprints to reduce risk through continual improvement.
- Perform reviews and analysis of complex threat intelligence reports to build actionable plans to address issues/gaps/vulnerabilities within the environment.
- Assist in escalated incident response manners as needed.
The Security Analyst III will work with the following internal and external stakeholders in the course of their responsibilities:
- Cybersecurity Analysts and Engineers and leaders within the Cyber Fusion Center
- Cybersecurity Analysts and Engineers within Cybersecurity Engineering
- Analysts and leaders within Cybersecurity Governance, Risk and Compliance
- Analyst and Engineers within Infrastructure, Application and Digital areas
- Managers and Directors within Infrastructure, Application and Digital areas
- Leaders throughout various business units across CommonSpirit
- Key Cybersecurity partners in Corporate Compliance, Privacy, Legal, HR and Communication departments
Responsibilities
- Responsible for processing complex threat intel reports to identify opportunities for hardening of controls, systems and processes within the organization.
- Provides leadership and assistance when needed in root-cause analysis efforts to determine improvement opportunities when failures occur.
- Provide team related engagement with Security Engineering, Identity Management Engineering, Security Architecture, CSOC, Network Engineering, Clinical Engineering, Systems Engineering, Application Development, and/or other IT Operations and business function owners.
- Assists in formal and informal complex security and vulnerability assessments.
- Works with multiple teams across the Cyber Fusion Center to develop and maintain documentation, maintains and confirm current lists of contacts, escalation points, and remediation paths.
- Act as a security advocate for IT Operations team’s adherence to CommonSpirit Health policies, security standards and requirements, and industry best practices.
- Manage workload, prioritizing tasks and documenting time, and other duties as directed by management.
- Assists in Continual Service Improvement efforts by identifying opportunities for process improvement. Drives some process improvement efforts.
- Pursue continuing education to grow and maintain knowledge of best practices, compliance requirements, vulnerabilities, threats and trends in information security, translating into operational action items, policies, procedures, standards and guidelines as part of the IT Security team.
- Participate in the collection and documentation of departmental knowledge artifacts, participant in the development and population of knowledge management and collaboration systems for the IT Security team.
- Communicates security and technical information to team members and across the IT Organization.
- Assists Management in identifying knowledge and process gaps.
Qualifications
- Bachelor’s Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent professional experience required.
- Previous extensive experience in related job area (Vulnerability Management, Information Security, Identity/Access Management, IT Audit, Threat Management, Forensics/eDiscovery, Security Compliance, Policies and Standards) required.
- Previous experience in IT security/system/network operations and administration or programming required.
- One or more relevant technical/professional security certifications (such as: COMP-TIA Network+ , Security+, SANS GIAC, CISSP, CRISC, CISA, or vendor-specific) preferred.
- Functional understanding of regulatory and compliance mandates and frameworks, including but not limited to: HIPAA, HITECH, PCI, Sarbanes-Oxley, Center for Internet Security (CIS), or NIST preferred.
- Experience conducting Analysis, Prioritization, and Documentation, and the management of communication with leadership and affected stakeholders preferred.
- Knowledge of healthcare environments preferred.
- Previous project management or project coordination experience preferred.
- Previous Information Security experience in the healthcare/medical environment strongly preferred.