Security Analyst

Mayo Clinic•Rochester, MN

2d•Hybrid

About The Position

This role benefits from experience supporting strategic cross-functional initiatives, especially in project management, data analysis, and strategic problem-solving. The ideal candidate is comfortable managing multiple workstreams and balancing priorities to meet deliverables. A foundation in data storytelling is preferred, including the ability to analyze information, spot trends, and clearly communicate insights to both technical and non-technical audiences. Familiarity with business operations and how decisions impact efficiency, risk, and organizational goals is also valuable. Experience with Microsoft tools is important, particularly Microsoft Office applications and knowledge of the Microsoft Power Platform for workflow automation, reporting, and solution development. This position values creativity and strategic thinking, including critical analysis, the development of innovative solutions, and the ability to contribute to forward-looking initiatives that support both departmental and enterprise objectives. •The Security Analyst position is a member of the team, who assists in the development, management and curation of the Security Enterprise Security Risk Management (GS-ESRM) Program. The Security Analyst supports the planning and execution of overarching security analysis endeavors. Demonstrated agility in working with rapidly developing project scope and plan. Responsible for supporting the development of the ESRM approach. Takes a data-driven approach to reach make recommendations that support and advance business objectives. Ensures the developed solutions satisfy the stated requirements and business objectives. Applies knowledge base of relevant systems/applications as it relates to workflow, process, and problem resolution and recommends improvements. Researches and analyzes operational procedures and methods and recommends changes for improvement in efficiency and effectiveness. • Security threat identification, analyzing open source information and threat actor behavior. Within Security, the Security Analyst will collaborate with a wide-range of Mayo Clinic departments including: the Office of Information Security, Legal, Operational Risk Management, Office of Patient Experience and Human Resources. Job duties include researching, developing, and evaluating procedures for the aggregation, processing, analyzing, and reporting on potential Security activities. Support enterprise-wide security threat intelligence and countermeasure efforts. Review alerts, trends, or anomalies from data or in response to stakeholder inquiries using monitoring tools. Recommends the creation or implementation of Security policy, process, and procedures. Displays an ability to identify and define problems as well as generate and recommend potential solutions while involving the appropriate stakeholders in the process. Provides project management and analyst support for department projects. Consults Mayo Clinic leadership to provide unbiased and accurate information, analysis and recommendations to support and advance strategic and operational security initiatives. Conduct data triage of security events collected by the security records management system (D3/Resolver), third party open source intelligence providers, government open source intelligence partnerships, User Entity Behavioral Analytics (UEBA), and other client network and endpoint monitoring tools (infant protections system, video data analytics). Leverages data mining and integrates multiple sources of data to recommend strategic insights to best meet business needs. This position is Hybrid, must live within driving distance to a Mayo Clinic Campus This vacancy is not eligible for sponsorship / we will not sponsor or transfer visas for this position. During the selection process, you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps. Why Mayo Clinic Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans [https://jobs.mayoclinic.org/benefits/] – to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic. Benefits Highlights Medical: Multiple plan options. Dental: Delta Dental or reimbursement account for flexible coverage. Vision: Affordable plan with national network. Pre-Tax Savings: HSA and FSAs for eligible expenses. Retirement: Competitive retirement package to secure your future. Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives. Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is. [https://jobs.mayoclinic.org/alllocations] Equal Opportunity All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the "EOE is the Law" [https://www.eeoc.gov/poster]. Mayo Clinic participates in E-Verify [https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf] and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.

Requirements

Experience supporting strategic cross-functional initiatives, especially in project management, data analysis, and strategic problem-solving.
Comfortable managing multiple workstreams and balancing priorities to meet deliverables.
Ability to analyze information, spot trends, and clearly communicate insights to both technical and non-technical audiences.
Familiarity with business operations and how decisions impact efficiency, risk, and organizational goals.
Experience with Microsoft tools, particularly Microsoft Office applications and knowledge of the Microsoft Power Platform for workflow automation, reporting, and solution development.
Demonstrated agility in working with rapidly developing project scope and plan.
Takes a data-driven approach to reach make recommendations that support and advance business objectives.
Ensures the developed solutions satisfy the stated requirements and business objectives.
Applies knowledge base of relevant systems/applications as it relates to workflow, process, and problem resolution and recommends improvements.
Researches and analyzes operational procedures and methods
Displays an ability to identify and define problems as well as generate and recommend potential solutions while involving the appropriate stakeholders in the process.

Nice To Haves

A foundation in data storytelling is preferred.
Values creativity and strategic thinking, including critical analysis, the development of innovative solutions, and the ability to contribute to forward-looking initiatives that support both departmental and enterprise objectives.

Responsibilities

Assists in the development, management and curation of the Security Enterprise Security Risk Management (GS-ESRM) Program.
Supports the planning and execution of overarching security analysis endeavors.
Supports the development of the ESRM approach.
Recommends changes for improvement in efficiency and effectiveness.
Security threat identification, analyzing open source information and threat actor behavior.
Collaborate with a wide-range of Mayo Clinic departments including: the Office of Information Security, Legal, Operational Risk Management, Office of Patient Experience and Human Resources.
Researching, developing, and evaluating procedures for the aggregation, processing, analyzing, and reporting on potential Security activities.
Support enterprise-wide security threat intelligence and countermeasure efforts.
Review alerts, trends, or anomalies from data or in response to stakeholder inquiries using monitoring tools.
Recommends the creation or implementation of Security policy, process, and procedures.
Provides project management and analyst support for department projects.
Consults Mayo Clinic leadership to provide unbiased and accurate information, analysis and recommendations to support and advance strategic and operational security initiatives.
Conduct data triage of security events collected by the security records management system (D3/Resolver), third party open source intelligence providers, government open source intelligence partnerships, User Entity Behavioral Analytics (UEBA), and other client network and endpoint monitoring tools (infant protections system, video data analytics).
Leverages data mining and integrates multiple sources of data to recommend strategic insights to best meet business needs.