Cybersecurity Analyst

PHI Health•Phoenix, AZ

2d•Onsite

About The Position

PHI Health is seeking a Cybersecurity Analyst to support its cybersecurity governance program. This role involves policy administration, risk management, security awareness, compliance coordination, third-party risk assessments, cybersecurity metrics, and operational program management. The analyst will ensure cybersecurity processes are organized, documented, measurable, and aligned with organizational standards, while also supporting technical cybersecurity initiatives. This position requires collaboration across Information Technology and business departments to coordinate security activities, maintain regulatory documentation, and enhance organizational cybersecurity maturity across healthcare, aviation, and corporate operations.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience.
One to three years of experience in cybersecurity, information technology, compliance, risk management, auditing, or related fields preferred.
Experience creating documentation, reports, or technical procedures.
Experience coordinating projects or working across multiple departments preferred.
Experience supporting regulated environments such as healthcare, aviation, or financial services is preferred but not required.
Microsoft Defender Security Suite
Microsoft Entra ID / Azure Active Directory
Strong written communication skills.
Excellent organizational and documentation abilities.
Ability to manage multiple projects simultaneously.
Strong analytical and critical thinking skills.
Comfortable working with technical and non-technical stakeholders.
Strong attention to detail.
Excellent presentation and communication skills.
Ability to learn new technologies quickly.
Strong customer service mindset.
Ability to maintain confidentiality.

Nice To Haves

Microsoft 365 Security
SIEM and security monitoring platforms
Vulnerability management tools
Identity and Access Management (IAM)
Multi-factor Authentication
Privileged Access Management
Network security principles
Endpoint security
Email security
NIST Cybersecurity Framework
Security hardening standards
Incident response methodologies
Preferred Certifications: Security+, ISC² Certified in Cybersecurity (CC), Microsoft Security Fundamentals, Certified HIPAA Security Professional (preferred), ITIL Foundation

Responsibilities

Coordinate and maintain the enterprise cybersecurity governance program.
Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
Coordinate periodic policy reviews to ensure documentation remains current and aligned with regulatory and business requirements.
Maintain the enterprise cybersecurity risk register and track mitigation activities through completion.
Perform cybersecurity reviews for new technologies, software solutions, AI tools, and business initiatives using established risk assessment processes.
Coordinate third-party security assessments and vendor cybersecurity reviews.
Assist with HIPAA Security Rule, NIST Cybersecurity Framework, and other regulatory or contractual compliance activities.
Coordinate cybersecurity evidence collection for internal audits, external audits, cyber insurance renewals, and customer security questionnaires.
Administer the enterprise cybersecurity awareness program, including KnowBe4 campaigns, phishing simulations, and user education initiatives.
Track cybersecurity metrics and key performance indicators and prepare executive dashboards and management reports.
Coordinate Cybersecurity Council meetings, document action items, and track completion of assigned tasks.
Maintain cybersecurity documentation, including inventories, exception registers, standards, and supporting records.
Support incident response activities through documentation, communications, lessons learned, and corrective action tracking.
Assist in coordinating tabletop exercises, business continuity planning, and disaster recovery testing.
Monitor cybersecurity project milestones and ensure governance deliverables are completed on schedule.
Assist in developing cybersecurity communications, awareness materials, newsletters, and organizational guidance.
Maintain inventory of cybersecurity tools, licensing, subscriptions, and service contracts.
Support annual cybersecurity program reviews and continuous improvement initiatives.
Perform other cybersecurity administrative and operational duties as assigned.