Security Analyst / Engineer

Altru Health System•Grand Forks, ND

8d•$77,501 - $116,251•Onsite

About The Position

The Security Analyst is responsible for the design, implementation, and maintenance of the information security program for the entire health system. They are responsible for conducting routine risk assessments of Information Systems throughout organization, and presents recommendations to IT Leadership. The Security Analyst investigates and responds to suspected or actual information security incidents and identifies, evaluates, and implements technical controls to protect organization data in a constantly changing threat environment.

Requirements

Associates - Computer and Information Science
A minimum of 3 years Related Experience
Driver's License with Acceptable Driving Record
proficiency in reading, writing, and speaking English

Nice To Haves

Certified In Healthcare Privacy and Security (CHPS) | American Health Information Management Association (AHIMA)
Certified Information System Security Professional (CISSP) | International Information System Security Certification Consortium (ISC)
Certified Information Systems Manager (CISM) | Information Systems Audit and Control Association (ISACA)
Bachelors - Computer and Information Science

Responsibilities

Creates and maintains documentation for internal procedures, assessments, investigations, and audits.
Maintains Security Infrastructure with direction from senior analysts, including but not limited to Firewall, Web Filter, SIEM, DLP, and IDS technologies.
Monitors security instrumentation and responds to events as appropriate.
Participates in Security Incident Response Team activities.
Conducts security risk assessments for systems and processes.
Evaluates possible mitigations and recommends technical or process approaches to address vulnerabilities.
Periodically conducts audits to assess effectiveness of policies and procedures.
Creates and delivers security training materials to staff at all levels of the organization.
Performs security architecture and engineering services for new and existing systems.
Leads some Security Incident Response Team activities.
Performs other duties as assigned or needed to meet the needs of the department/organization.