Security Analyst
About The Position
The Security Analyst supports the development, management, and curation of Mayo Clinic’s Global Security Enterprise Security Risk Management (GS-ESRM) Program and helps plan and execute enterprise security analysis initiatives. The role contributes to developing the ESRM approach, uses data-driven analysis to recommend actions that advance business objectives, and ensures proposed solutions meet requirements. It also applies knowledge of relevant systems and applications to workflows, processes, and problem resolution, and recommends improvements to operational procedures for greater efficiency and effectiveness. The analyst identifies security threats, analyzes open-source information and threat-actor behavior, and collaborates with departments including the Office of Information Security, Legal, Operational Risk Management, the Office of Patient Experience, and Human Resources. The position researches, develops, and evaluates procedures for aggregating, processing, analyzing, and reporting potential security activity; supports enterprise threat-intelligence and countermeasure efforts; and reviews alerts, trends, and anomalies using monitoring tools. The analyst recommends security policies and procedures, identifies problems and potential solutions with appropriate stakeholder involvement, and provides project-management and analytical support for departmental projects. The position consults Mayo Clinic leadership with unbiased, accurate analysis and recommendations for strategic and operational security initiatives. It conducts data triage of security events using the security records management system (D3/Resolver), third-party and government open-source intelligence, User Entity Behavioral Analytics (UEBA), and other network and endpoint monitoring tools, including infant protection systems and video data analytics. The analyst mines and integrates data from multiple sources to develop strategic insights. This is a hybrid position, and the employee must live within 100 miles’ driving distance of a campus. The position is not eligible for visa sponsorship or transfer.
Requirements
- Bachelor’s degree and three years of business or security experience; or an associate degree and five years of business or security experience; or a high school diploma/GED and seven years of business or security experience.
- Knowledge of problem-solving methodologies, planning techniques, continuous-improvement methods, project-management methods, and analytical tools and methodologies.
- Ability to independently manage a varied workload of complex assignments with multiple priorities.
- Desire to stay current with Global Security, information security, technology, healthcare trends, and institutional changes.
- Certification in a business or security field, such as project management, Agile, or healthcare security, or ability to obtain one within two years.
- Must live within 100 miles’ driving distance of a campus.
- This vacancy is not eligible for visa sponsorship or visa transfer.
Responsibilities
- Assist in developing, managing, and curating the GS-ESRM Program.
- Support planning and execution of overarching security analysis initiatives and development of the ESRM approach.
- Use data-driven analysis to recommend solutions that support business objectives and satisfy stated requirements.
- Apply knowledge of relevant systems and applications to workflows, processes, and problem resolution, and recommend improvements.
- Research and analyze operational procedures and methods and recommend changes to improve efficiency and effectiveness.
- Identify security threats and analyze open-source information and threat-actor behavior.
- Research, develop, and evaluate procedures for aggregating, processing, analyzing, and reporting potential security activities.
- Support enterprise-wide security threat intelligence and countermeasure efforts.
- Review alerts, trends, and anomalies using monitoring tools or in response to stakeholder inquiries.
- Recommend the creation or implementation of security policies, processes, and procedures.
- Identify and define problems, generate and recommend potential solutions, and involve appropriate stakeholders.
- Provide project-management and analyst support for departmental projects.
- Consult Mayo Clinic leadership with unbiased and accurate information, analysis, and recommendations for strategic and operational security initiatives.
- Triage security events using the security records management system, open-source intelligence providers and partnerships, UEBA, and other network and endpoint monitoring tools.
- Mine and integrate multiple data sources to recommend strategic insights that meet business needs.
Benefits
- Multiple medical plan options.
- Dental coverage through Delta Dental or a reimbursement account for flexible coverage.
- Affordable vision plan with a national network.
- HSA and FSAs for eligible expenses.
- Competitive retirement package.
- Competitive compensation and comprehensive benefit plans.
- Continuing education and advancement opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
