Info Sec Analyst II

Albany Medical Center•Albany, NY

1d•$70,068 - $108,605

About The Position

The Information Security Analyst II is a member of the information security team and works closely with other team members to develop and implement a comprehensive information security program. This includes defining security policies, processes, and standards; selecting and deploying technical controls to meet security requirements; and defining processes and standards to maintain security configurations. The role is responsible for security event analysis, incident response, and identity access management activities, including system account administration and provisioning or de-provisioning system access. The position has no supervisory responsibilities and involves frequent communication within Information Technology and with certain Albany Med customers. It may require access to sensitive information, including HIPAA Protected Health Information and other information regulated by federal and New York State statutes. Access and use of information must follow need-to-know and minimum-necessary principles and Albany Med Health System policies and standards. The role is on the day shift. On-call, extended weekday, and weekend support may be required for on-site and off-site locations when warranted by critical business requirements.

Requirements

Experience with creating and managing project plans, including budgeting and resource allocation.
Ability to maintain confidentiality and follow need-to-know and minimum-necessary requirements when handling sensitive information.

Responsibilities

Use desktop computer applications such as the Microsoft Office suite effectively.
Perform duties in support of confidentiality, integrity, and availability principles.
Apply project management fundamentals, including creating and managing project plans, budgeting, and resource allocation.
Assist in implementing data access security measures by identifying, analyzing, and resolving security and system alerts.
Maintain the security identity access system by provisioning or de-provisioning users within various system applications.
Monitor and respond to alerts generated by the Security Information Event Management (SIEM) system.
Analyze data security metrics for management reporting.
Provide on-call, extended weekday, and weekend support for on-site and off-site locations as warranted by critical business requirements.
Maintain confidentiality by using and communicating information only as needed to perform assigned duties.
Perform at or above Information Technology performance standards.
Fulfill department work-coverage and administration-notification requirements during absences.
Complete other duties or assignments as designated by management.