IT Security Analyst

Clearview Cancer Institute•Huntsville, AL

About The Position

The IT Security Analyst provides day-to-day security operations, compliance evidence, and incident response. The role works closely with clinical and compliance teams to identify vulnerabilities, respond to incidents, and incorporate security across network infrastructure and clinical and administrative systems. The position also provides general IT support and project work as needed. The position operates in the IT department of a busy oncology, hematology, and radiation clinic and has no direct patient contact. It is not a supervisory position. The employee may need to work more than 40 hours per week depending on the situation and may be on call for events such as power outages, weather events, or special events.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, or a related field.
Approximately 5 years of IT experience in networking, systems, or help desk.
Strong understanding of security technologies, tools, and methodologies, including intrusion detection systems, firewalls, encryption, and vulnerability assessment.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and as part of a team while managing multiple tasks and priorities.
Strong interpersonal skills and ability to collaborate with stakeholders across departments and organizational levels.
Ability to sit at a desk for up to two-thirds of the day on some days.
Ability to lift up to 50 pounds when transporting materials or equipment.
Manual dexterity when handling power cords, tools, and similar items.
May be required to work more than 40 hours per week depending on the situation and may be on call for power outages, weather events, special events, or similar circumstances.

Nice To Haves

Industry certifications preferred, such as CompTIA Security+, CySA+, Network+, Pentest+, or CISSP.
Healthcare or HIPAA experience is a plus.

Responsibilities

Monitor and analyze security alerts, logs, and reports to detect, proactively mitigate, and respond to security issues.
Support HIPAA Security Rule compliance, risk assessments, and audit documentation.
Manage vulnerability and patch remediation across all sites.
Administer endpoint, email, and identity security controls, including CrowdStrike, Microsoft 365, and MFA.
Conduct ongoing risk assessments and security audits to maintain and demonstrate compliance.
Stay current with security trends, threats, and technologies to enhance the organization’s security posture.
Develop and maintain an incident response plan for security incidents, breaches, and breaches of sensitive data.
Investigate security incidents, perform root cause analysis, and recommend corrective actions to prevent recurrence.
Educate and train staff and stakeholders to promote security awareness and compliance.
Provide general IT support and participate in project work as needed.