Information Security Analyst I - Governance, Risk, and Compliance (GRC)

Uhs

330d

About The Position

One of the nation's largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (UHS) has built an impressive record of achievement and performance. During the year, UHS was again recognized as one of the World's Most Admired Companies by Fortune; and listed in Forbes ranking of America's Largest Public Companies. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located all over the U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. The Corporate Information Services Department is seeking a dynamic and talented Information Security Analyst I. The Information Security Analyst I participates in the identification, implementation, maintenance, and support of technologies designed to protect the confidentiality, integrity or availability of UHS and affiliates' information systems. Works with technical and non-technical staff to ensure that deployed technologies are effectively and efficiently providing the intended controls consistent with established policies and procedures. Where appropriate, trains and supports technical staff in UHS affiliated locations to deploy, manage and support selected technologies. May oversee the technical aspects of tasks assigned to less experienced staff or contractors on projects, systems or applications assigned.

Requirements

• Bachelor's degree in Information Systems Security and Risk Management, Computer Science, or related field required.
• Minimum of 1-3 years' experience with desktop, server and/or network security administration in a mixed computing environment.
• Experience managing and supporting some or all of the following or similar information security technologies or processes: Anti-malware protections and analysis, Web filtering and security, Vulnerability scanning and management, Encryption technologies for data at rest and data in transit, Mobile device and removable media protection or management systems, Authentication - including various forms of SSO and MFA, Cloud application security, Security Information and Event Management (SIEM) systems, Interpreting Common Vulnerabilities and Exposures (CVE) data, Device control, Data Loss Prevention (DLP), Forensic analysis.
• Familiarity with risk assessment and risk management concepts or processes.
• Working knowledge of various regulatory security requirements - particularly Sarbanes-Oxley (SOX), HIPAA, and HITECH.
• Working knowledge of common cyber security frameworks such as HITRUST, NIST, CSC20, or others.
• Working knowledge of scripting languages such as Python, PowerShell, and VB is a plus.
• Ability to prioritize multiple tasks and be detail oriented.
• An information security certification is a plus -- to demonstrate proficiency and knowledge of information security best practices and concepts.
• Excellent communication, interpersonal and project management skills.

Responsibilities

• Maintains selected information security technologies within guidelines of policies and in keeping with good project management principles.
• Monitors the resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center.
• Periodically reviews deployed security technologies to ensure that the solutions continue to provide the intended protections efficiently and effectively.
• Identifies gaps in protection, and recommends solutions to remediate or mitigate the risks associated with the protection gaps.
• Assists more experienced members of the Information Security Team implement and support new information security technologies or processes.
• Works with staff at all levels in the organization, vendors and contractors to ensure protections are effective, efficient and non-disruptive to the appropriate duties, rights and mission of the individuals and the organization(s) affected.

Benefits

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Personal and Laundry Services
• Education Level: Bachelor's degree