IT Security Analyst

OneOncology•Huntsville, AL

1d•Onsite

About The Position

The purpose of the IT Security Analyst is to provide day-to-day security operations, compliance evidence, and incident responses. This role works closely with clinical and compliance teams to identify vulnerabilities, respond to incidents, and build security into every layer of our environment, from network infrastructure to clinical and administrative systems.

Requirements

Strong understanding of security technologies, tools, and methodologies, including intrusion detection systems, firewalls, encryption, and vulnerability assessment.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and as part of a team, effectively managing multiple tasks and priorities.
Strong interpersonal skills to collaborate with stakeholders across various departments and levels of the organization.
Bachelor's degree in Cybersecurity, Information Technology, or a related field
Approximately 5 years of IT experience (networking, systems, or help desk)

Nice To Haves

Industry certifications preferred (e.g., CompTIA Security+, CySA+, Network+, Pentest+, CISSP)
Healthcare or HIPAA experience a plus

Responsibilities

Monitor and analyze security alerts, logs, and reports to detect, proactively mitigate, and respond to security incidents.
Support HIPAA Security Rule compliance, risk assessments, and audit documentation.
Manage vulnerability and patch remediation across all sites.
Administer endpoint, email, and identity security controls (CrowdStrike, Microsoft 365, MFA).
Conduct ongoing risk assessments and security audits to maintain and demonstrate compliance.
Stay updated with the latest security trends, threats, and technologies to proactively enhance our security posture.
Develop and maintain an incident response plan to effectively handle security breaches, incidents, and breaches of sensitive data.
Investigate security incidents, perform root cause analysis, and recommend corrective actions to prevent recurrence.
Provide education and training to staff and stakeholders to promote a culture of security awareness and compliance.
Provide general IT support and project work as needed.