SR Information Security Analyst - IS-Mod

Mayo Clinic•Rochester, MN

7d•$116,043 - $168,292

About The Position

The Senior Information Security Analyst plays a key role in advancing Mayo Clinic’s Data Protection Program by leading monitoring, alerting, and operational improvement activities focused on protecting Mayo Clinic Data. This position is responsible for identifying and analyzing potential data loss risks, coordinating response and escalation activities, developing metrics and reporting, and helping mature enterprise monitoring capabilities across multiple security platforms. The Information Security Senior Analyst has a broad understanding of information security concepts and how to apply and implement them. They serve as a liaison between Information Security, Information Technology, business representatives, and various oversight committees, assisting with developing, communicating, and achieving Mayo’s Information Security goals. The Information Security Senior Analyst is considered knowledgeable and skilled in industry standard information security concepts with particular focus on the NIST Cybersecurity Framework, or equivalent.

Requirements

Broad understanding of information security concepts and how to apply and implement them.
Knowledgeable and skilled in industry standard information security concepts with particular focus on the NIST Cybersecurity Framework, or equivalent.
Knowledgeable, proficient, and experienced in integrating multiple disciplines (e.g., business / systems process analysis, data analysis, data informatics, risk management, regulatory requirements, and technology) for strategic and operational planning.
Knowledgeable, proficient, and experienced in using problem-solving methods, planning techniques, continuous improvement, project management, and analytical tools and methodologies to achieve Mayo goals.
Knowledgeable, proficient, and experienced in conducting information security assessments.
Knowledgeable, proficient, and experienced in addressing information security questions and inquiries from business, clinical areas, and other OIS teams.
Knowledgeable, proficient, and experienced in ensuring appropriate treatment of cybersecurity risk and monitoring compliance to Mayo’s Information Security policies, processes and procedures.
Knowledgeable, proficient, and experienced in creating, supporting, and evaluating security prototypes.
Knowledgeable, proficient, and experienced in administering Information Security processes and tools that enable the organization to operate effectively and efficiently
Knowledgeable, proficient, and experienced in creating policies, processes and procedures and guiding them through the approval process.
Ability to handle a varied workload of projects with multiple priorities.
Ability to stay current on information security, technology and healthcare trends and institutional changes.
Excellent interpersonal skills to include presentation, negotiation, influencing, team facilitation and written communications.
Effective time management skills.
Ability to assist with directing the work of Analysts and Associate Analysts.
Ability to draft communication of risk and complex cyber security topics to a diverse audience.

Nice To Haves

Organizational Change Management – particular focus on Procsi’s ADKAR model
Project Management – particular focus on the Project Management Body of Knowledge (PMBOK)
Business Analysis – particular focus is on the Business Analysis Body of Knowledge (BABOK)

Responsibilities

Integrating multiple disciplines (e.g., business / systems process analysis, data analysis, data informatics, risk management, regulatory requirements, and technology) for strategic and operational planning.
Using problem-solving methods, planning techniques, continuous improvement, project management, and analytical tools and methodologies to achieve Mayo goals.
Conducting information security assessments.
Addressing information security questions and inquiries from business, clinical areas, and other OIS teams.
Ensuring appropriate treatment of cybersecurity risk and monitoring compliance to Mayo’s Information Security policies, processes and procedures.
Creating, supporting, and evaluating security prototypes.
Administering Information Security processes and tools that enable the organization to operate effectively and efficiently
Creating policies, processes and procedures and guiding them through the approval process.
Handles a varied workload of projects with multiple priorities.
Staying current on information security, technology and healthcare trends and institutional changes.
Using excellent interpersonal skills to include presentation, negotiation, influencing, team facilitation and written communications.
Effectively managing time.
Assists with directing the work of Analysts and Associate Analysts.
Drafting communication of risk and complex cyber security topics to a diverse audience.