Security Analyst

Mayo Clinic • Rochester, MN

4d • $80,184 - $112,258 • Hybrid

About The Position

The Security Analyst is a member of the team that assists in developing, managing, and curating the Global Security Enterprise Security Risk Management (GS-ESRM) Program. The role supports the planning and execution of security analysis initiatives, adapts to rapidly evolving project scopes and plans, and helps develop the ESRM approach. The analyst uses data-driven analysis to make recommendations that advance business objectives, ensure solutions meet stated requirements, and recommend improvements to systems, workflows, processes, and operational procedures.

The position focuses on identifying security threats, analyzing open-source information and threat actor behavior, and supporting enterprise security threat intelligence and countermeasure efforts. The analyst collaborates with Mayo Clinic departments including the Office of Information Security, Legal, Operational Risk Management, Office of Patient Experience, and Human Resources. Responsibilities include researching and evaluating procedures for aggregating, processing, analyzing, and reporting potential security activities; reviewing alerts, trends, and anomalies using monitoring tools; and recommending security policies, processes, and procedures.

The Security Analyst identifies problems and potential solutions in collaboration with appropriate stakeholders, provides project management and analytical support for departmental projects, and consults Mayo Clinic leadership with unbiased, accurate information and recommendations for strategic and operational security initiatives. The role conducts data triage of security events using the security records management system (D3/Resolver), third-party and government open-source intelligence sources, User Entity Behavioral Analytics (UEBA), and other client network and endpoint monitoring tools, including infant protection systems and video data analytics. The analyst mines and integrates multiple data sources to develop strategic insights that meet business needs.

This is a hybrid position. The employee must live within 100 miles' driving distance of campus. The position is not eligible for visa sponsorship or transfer.

Requirements

• Bachelor’s degree and three years of business or security experience, or an associate degree and five years of business or security experience, or a high school diploma/GED and seven years of business or security experience.
• Knowledge of problem-solving methodologies, planning techniques, continuous improvement methods, project management methods, and analytical tools and methodologies.
• Ability to independently manage a varied workload of complex assignments with multiple priorities.
• Desire to stay current with global security, information security, technology, healthcare trends, and institutional changes.
• Certification in a business or security field, such as project management, Agile, or healthcare security, or ability to obtain one within two years.

Responsibilities

• Assist with the development, management, and curation of the GS-ESRM Program and support development of the ESRM approach.
• Support planning and execution of security analysis initiatives, adapting to changing project scope and plans.
• Use data-driven analysis to make recommendations that support business objectives and ensure solutions meet requirements.
• Apply knowledge of relevant systems and applications to workflows, processes, and problem resolution, and recommend improvements.
• Research and analyze operational procedures and methods, recommending changes to improve efficiency and effectiveness.
• Identify security threats and analyze open-source information and threat actor behavior.
• Research, develop, and evaluate procedures for aggregating, processing, analyzing, and reporting potential security activities.
• Support enterprise-wide security threat intelligence and countermeasure efforts.
• Review alerts, trends, and anomalies from data or stakeholder inquiries using monitoring tools.
• Recommend the creation or implementation of security policies, processes, and procedures.
• Identify and define problems, generate and recommend potential solutions, and involve appropriate stakeholders.
• Provide project management and analyst support for department projects.
• Consult Mayo Clinic leadership with unbiased and accurate information, analysis, and recommendations for security initiatives.
• Triage security events using D3/Resolver, open-source intelligence providers and partnerships, UEBA, and other client network and endpoint monitoring tools.
• Mine and integrate multiple data sources to recommend strategic insights that meet business needs.

Benefits

• Multiple medical plan options.
• Dental coverage through Delta Dental or a reimbursement account for flexible coverage.
• Affordable vision plan with a national network.
• HSA and FSAs for eligible expenses.
• Competitive retirement package.
• Continuing education and advancement opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level