Security Analyst

Mayo Clinic•Rochester, MN

3d•Hybrid

About The Position

The Security Analyst supports the development, management, and curation of the Global Security Enterprise Security Risk Management (GS-ESRM) Program and helps plan and execute security analysis initiatives. The role supports development of the ESRM approach, uses data-driven analysis to recommend actions that advance business objectives, and ensures solutions meet stated requirements and business objectives. It applies knowledge of relevant systems and applications to workflows, processes, and problem resolution, and recommends improvements to operational procedures and methods. The position focuses on identifying security threats, analyzing open-source information and threat actor behavior, and supporting enterprise-wide threat intelligence and countermeasure efforts. The analyst collaborates with Mayo Clinic departments including the Office of Information Security, Legal, Operational Risk Management, the Office of Patient Experience, and Human Resources. The role also provides project management and analytical support, and consults Mayo Clinic leadership with unbiased information, analysis, and recommendations for strategic and operational security initiatives. The position is hybrid, and the employee must live within 100 miles driving distance of campus. The vacancy is not eligible for visa sponsorship or transfer.

Requirements

Bachelor’s degree and three years of business or security experience; or an associate degree and five years of business or security experience; or a high school diploma/GED and seven years of business or security experience.
Knowledge of problem-solving methodologies, planning techniques, continuous improvement methods, project management methods, and analytical tools and methodologies.
Ability to independently manage a varied workload of complex assignments with multiple priorities.
Desire to stay current with global security, information security, technology, healthcare trends, and institutional changes.
Certification in a business or security field, such as project management, Agile, or healthcare security, or ability to obtain one within two years.

Responsibilities

Support development, management, and curation of the GS-ESRM Program and development of the ESRM approach.
Support planning and execution of security analysis initiatives, adapting to rapidly changing project scope and plans.
Identify security threats and analyze open-source information and threat actor behavior.
Research, develop, and evaluate procedures for aggregating, processing, analyzing, and reporting potential security activities.
Support enterprise-wide security threat intelligence and countermeasure efforts.
Review alerts, trends, and anomalies from data or stakeholder inquiries using monitoring tools.
Recommend the creation or implementation of security policies, processes, and procedures.
Identify and define problems, develop and recommend potential solutions, and involve appropriate stakeholders.
Provide project management and analytical support for department projects.
Consult Mayo Clinic leadership with information, analysis, and recommendations supporting strategic and operational security initiatives.
Triage security events collected through D3/Resolver, third-party and government open-source intelligence providers, UEBA, and other client network and endpoint monitoring tools.
Mine and integrate data from multiple sources to recommend strategic insights that meet business needs.
Recommend improvements to operational procedures and methods for efficiency and effectiveness.
Ensure developed solutions satisfy stated requirements and business objectives.
Collaborate with Mayo Clinic departments, including the Office of Information Security, Legal, Operational Risk Management, the Office of Patient Experience, and Human Resources.