Associate Information Security Analyst

Martin’s Point Health Care•Portland, ME

About The Position

Join Martin's Point Health Care - an innovative, not-for-profit health care organization offering care and coverage to the people of Maine and beyond. As a joined force of "people caring for people," Martin's Point employees are on a mission to transform our health care system while creating a healthier community. Martin's Point employees enjoy an organizational culture of trust and respect, where our values - taking care of ourselves and others, continuous learning, helping each other, and having fun - are brought to life every day. Join us and find out for yourself why Martin's Point has been certified as a "Great Place to Work" since 2015. Position Summary The Associate Information Security Analyst will be a contributor to security policies, monitoring and analyzing traffic and logs, and assisting in protecting the organization's IT systems and software from malicious activity and technology breaches. With general guidance and coaching, participates in security risk assessments, performing and analyzing vulnerability scans, working with others in IT and the business to remediate and eliminate risks. The Associate Information Security Analyst is proficient in security and technical knowledge, standards development, documentation of the security program, policies and procedures, risk identification and remediation, reporting, and awareness education related to information security.

Requirements

Bachelors degree in CIS, CS, Business Administration, or similar, or combination of equivalent education and experience
1+ years’ experience with information security technologies, security monitoring, incident response, open-source technologies, and various operating systems
Customer Focus Act as an owner of the business and seek to understand needs. Able to communicate effectively and clearly to all levels of the IT organization and business when addressing a challenge or identified opportunity – take ownership.
Business Acumen Understands the business model of MPHC and can apply that context to projects Always looks for ways to improve processes and create value for business partners. Understands how organizational workflows affect data meaning and use.
Drive for Results Participates in enterprise architectural/analytical responsibilities and can plan/scope several inter-related activities to create efficiencies Assists business stakeholders in making informed decisions. Strong troubleshooting skills Meticulously reviews their work and openly receives 3rd party review.
Continuous Learning Knows limitations and is open to learning from others, especially when cross-team collaborations are needed. Seeks new knowledge and remains current in the industry.
Process Improvement Participates in continuous process improvement efforts within the team. Consistently identifies opportunities for improvement in processes and work products Ability to document and create standard work Dealing with Ambiguity Able to communicate complex ideas and knows who to engage in problem solving. Understand when to bring other team members onboard. Proactively engages in learning to bring understanding to ambiguous situations.
Information Security Analyst Demonstrates an understanding of and alignment with Martin’s Point Values Thorough understanding of SIEMs, incident response, disaster recovery, contingency planning, encryption technologies, intrusion detection/prevention systems, and/or vulnerability management Knowledge of Microsoft and Linux operating systems Project management and documentation skills Interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community Maintains industry awareness regarding all information and cyber security trends and directions Ability to organize and prioritize multiple tasks independently Thorough understanding of traditional and mobile operating systems and applications Ability to test and analyze complex system, network, and database security settings Understands security protocols and monitoring tools Has knowledge of how best practices integrate with company objectives

Nice To Haves

Healthcare experience and familiarity with HIPAA/HITECH, PCI-DSS, and NIST 800-53 is highly desirable
Global Information Assurance Certification (GIAC), Security+, Offensive Security Certified Professional (OSCP), and/or Certified Ethical Hacker (C|EH) is a plus.

Responsibilities

Monitors SIEM, IDS/IPS, endpoint protections, and identity management solutions.
Assists in the administration and engineering of the security infrastructure including the single sign-on, multi-factor authentication, business continuity, and GRC tools.
Assists coordinating group-wide and company-wide information security matters such as incident response, intrusion detection management, and cyber security advisories.
Identifies information and IT security risks including IT technical implementations or business processes.
Under general direction, monitors and audits information systems, networks, and databases to identify and isolate occurrences of unauthorized activity; prepares and coordinates corrective actions.
Assists with conducting security assessments and audits, penetration testing, IT forensic investigations and incident management.
Assists with performing and/or coordinating regular security assessments of existing or new infrastructure or applications.
Coordinates response to information security incidents and threats.
Assesses and coordinates information and cyber vulnerabilities throughout the organization.
Reviews and enforces information security policy, standards and guidelines for business operations and technology implementations.