Info Sec Analyst II

Children's National Hospital • Silver Spring, MD

2d • $87,173 - $145,267

About The Position

The Information Security Analyst II supports the InfoSec mission of securing the patient experience. This position performs analysis and remediation of information security risks that could lead to compromise of Children’s National systems. Work includes cataloging risks, identifying and remediating vulnerabilities, securing data, and establishing policies and standards.

The analyst works with other CNH business units to help secure assets, applications, and data; documents cybersecurity procedures and risks; and participates in cybersecurity incident-related tasks as required.

Requirements

• Bachelor’s degree in computer science, math, engineering, or another relevant discipline, or equivalent training and work experience.
• At least 3 years of cybersecurity experience focused on vulnerability management, cybersecurity operations, analysis, forensics, and/or investigations.
• Demonstrated ability to apply key cybersecurity practices, controls, and frameworks.
• Excellent written and verbal communication, presentation, interpersonal, and collaborative skills, including the ability to explain information-risk concepts to technical and nontechnical audiences.
• Understanding and some application of cybersecurity auditing, compliance, and policy practices.
• Understanding and some application of risk assessment, vulnerability management, penetration testing, and threat identification practices.
• Understanding and some application of access management, Active Directory, privileged account management, and authentication controls and practices.
• Understanding and some application of incident response, risk remediation, business continuity, disaster recovery, and cyber operations practices.

Responsibilities

• Identify, document, and report cyber risks.
• Execute tasks to develop and document cybersecurity policies, standards, and procedures.
• Engage directly with other CNH business units to help ensure the security of assets, applications, and data.
• Document procedures for managing access to CNH systems, data, and other assets.
• Engage in tasks associated with cybersecurity incidents, as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level