Senior Information Security Analyst in Information Technology

UTHealth Houston•Houston, TX

1d•Onsite

About The Position

UTHealth Houston is seeking an experienced Senior Information Security Analyst to help advance and strengthen its enterprise information security program in support of its healthcare, education, and research missions. In this role, you will lead the design and enhancement of key security infrastructure capabilities, including VPN, WAF, NGFW, and cloud security, among others. You will also contribute to enterprise initiatives while serving as a subject-matter expert on critical information security-related systems. Ideal candidates bring experience in DevSecOps, CI/CD security, secure remote access solutions, and automation. This is an opportunity to make a meaningful impact in a collaborative, mission-driven environment. What we do here changes the world. UTHealth Houston is Texas’s resource for healthcare education, innovation, scientific discovery, and excellence in patient care. That’s where you come in.

Requirements

Complex problem-solving skills; ability to think independently as well as work in a dynamic team.
Ability to work within tight deadlines; strong organizational skills.
Excellent verbal and written communication skills.
Ability to configure and administer Windows and VMware servers and desktops.
Working knowledge of UNIX-based systems.
Web application security; programming, Linux system administration, database administration.
Network architecture design; incorporating security into SDLC.
Training in information technology required.
2 years of experience in information technology support or information technology auditing required
1 year to two years of direct involvement with security platforms deployed as part of an enterprise-level information security program required

Nice To Haves

Certified Information Systems Security Professional (CISSP) by the International Information System Security Certification Consortium, Inc. (ISC2) preferred
Certified Information Systems Auditor (CISA) by ISACA preferred
Certified Information Security Manager (CISM) by ISACA preferred
Experience in DevSecOps, CI/CD security, secure remote access solutions, and automation.

Responsibilities

Provides technical leadership and support in the selection, configuration, and maintenance of security and IAM software, utilities, and hardware.
Manages projects and supervises Information Security Staff and/or resources as relating to departmental projects and key initiatives as required by the Chief Information Security Officer.
Maintains current understanding of IT audit techniques, information security, and IAM best practices, policies, and procedures, including Federal, State, and other applicable regulatory requirements and guidelines (HIPAA, FERPA, NIST, PCI DSS, TAC 202).
Evaluates cost-effective alternatives to current information security program components.
Participates in annual review of all information security policies, standards, procedures, and guidelines; recommends amendments; assures alignment with current regulatory requirements.
Monitors and enforces compliance with information security policies, standards, procedures, and guidelines.
Responsible for developing, implementing, and maintaining an ongoing IT security awareness and employee training program for the entire UTHSC-H.
Conducts risk and security assessments, facilitates disaster recovery planning, and supports business continuity efforts for business-critical systems. Evaluates results with system owners and custodians.
Provides information security consulting on a variety of technologies and processes.
Performs periodic penetration tests and vulnerability scans. Reviews results for evidence of vulnerability or compromise; assists in or facilitates the implementation of the resolution. Track resolution of findings and prepare reports.
Manages enterprise configuration/vulnerability management program, web application firewalls, and security scans to identify and correct security gaps. Prepares remediation reports and provides technical mentorship and guidance for various levels of operations staff.
Participates, develops, and facilitates activities in support of Computer Security Incident Response Team (CSIRT) efforts. Coordinates initial assessments, including severity, potential impact, and resolution efforts with fellow CSIRT members.
Provides guidance on integrating IAM tools and automation into new and existing applications.
Works with clinical, academic, and administrative application groups to design, develop, and deploy IAM integration and automation solutions with minimum supervision.
Provides support for enterprise account life-cycle management, including, but not limited to, account provisioning, account de-provisioning, authentication, and authorization.
Provides support, configuration, and maintenance for the IAM infrastructure, including, but not limited to, IDM, AM, SSO, Federated Authentication, LDAP, IAM application development, and support tools.
Provide support for the Public Key Infrastructure system and process.
System administration for a variety of Linux and Windows-based servers to support security and IAM tools.
Monitors system log information for evidence of compromise; responds to and reports security incidents.
Provides forensic analysis and support for compliance and other security-related investigations; provides summary analysis as necessary.
Initiates and participates in periodic security audits; tests controls; prepares reports and makes recommendations as necessary.
Performs other duties as assigned.

Benefits

100% paid medical premiums for our full-time employees
Generous time off (holidays, preventative leave day, both vacation and sick time – all of which equate to around 37-38 days per year)
The longer you stay, the more vacation you’ll accrue!
Longevity Pay (Monthly payments after two years of service)
Awesome retirement/pension plan
Free financial and legal counseling
Free mental health counseling services
Gym membership discounts and access to wellness programs
Other employee discounts, including entertainment, car rentals, cell phones, etc.
Resources for child and elder care