IT Security Analyst III

Johns Hopkins Medicine•Hanover, MD

14d•$30 - $53•Hybrid

About The Position

Johns Hopkins Health Plans is a leader in provider-sponsored health plans. If you are interested in improving how healthcare is delivered, and have a passion to be at the forefront of change, JHHP is the place to call home. YOU belong here. What awaits you: Work-life balance - This is a hybrid role-Hanover, MD. Must report on site at least quarterly. Applicants living in MD, DC, VA, PA, DE, or FL will be given first consideration. Medical, Dental, and Vision Insurance. 403B Savings Plan w/employer contribution. Paid Time off & Paid holidays. Employee and Dependent Tuition assistance benefits. Health and wellness programs and MORE! Position Summary: The IT Security Analyst III is responsible for implementing and maintaining information security solutions across all JHHP information systems, ensuring compliance with NIST 800-171 and CMMC 2.0 standards. This role involves reviewing and aligning with regulatory security policies, best practices, and technical requirements to safeguard the organization’s infrastructure, including servers, routers, firewalls, and LAN/WAN equipment. The Analyst works closely with LAN Administrators and Network Engineers to continuously monitor and assess the security posture of all networked systems, taking proactive measures to identify and mitigate vulnerabilities. This role requires a deep understanding of network and security engineering, particularly in the context of information assurance (IA), to ensure all systems meet current regulatory requirements, including NIST 800-171 and CMMC 2.0. The Analyst is key in maintaining the organization’s security posture year-round and ensuring readiness for audits. Additionally, the IT Security Analyst III will stay up-to-date on emerging threats, security tools, and technologies, maintaining technical expertise on JHHC’s network hardware and software solutions, as well as the appropriate security measures required for each. Who we are: Johns Hopkins Health Plans (JHHP) is the managed care and health services business of Johns Hopkins Medicine. JHHP is a $3B business serving over 500,000 active members with lines of business in Medicaid, Medicare, commercial, military health, health solutions, and venture investments. JHHP is a leader in provider-sponsored health plans and is poised for future growth. Many organizations talk about transforming the future of healthcare, at Johns Hopkins Health Plans, we are setting the pace for change within the healthcare industry. We develop innovative, analytics-driven health programs in collaboration with provider partners to drive improved quality and better health outcomes for our members and the communities we serve. Johns Hopkins Health System and its affiliates are an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, mental or physical disability, genetic information, veteran status, or any other status protected by federal, state, or local law. Johns Hopkins Health System and its affiliates are drug-free workplace employers.

Requirements

Must be able to manage the security configuration of the Microsoft Windows Active Directory environment.
Must also have experience managing account configurations for client-server applications and have experience managing security risks in a Wide Area Network configuration.
Must have the ability to review and understand the security requirements of computer hardware and applications.
Must be able to develop policies and procedures to assure compliance with governmental, institutional and corporate regulations.
A minimum of two years’ experience in a LAN Administration or Network Engineering position.
A 4 year college degree plus 2 years’ experience in a network or security-related position OR an Associate’s degree plus 3 years’ experience in a security-related position OR 4 years’ experience in a security-related position OR current industry certification plus 2 years of experience in a network or security-related position

Nice To Haves

Security + or CISSP strong preferred

Responsibilities

Implement and maintain security measures across JHHP systems to meet NIST 800-171 and CMMC 2.0 compliance.
Collaborate with LAN Administrators and Network Engineers to monitor and manage system security.
Review and apply regulatory policies and best practices to networked infrastructure.
Identify and resolve vulnerabilities within all networked systems.
Maintain technical expertise on JHHC network hardware and security tools.
Support annual audits and help prepare the organization to meet all compliance requirements.