Senior Information Security Analyst (NOT Remote)

Saint Francis Hospital • New Haven, CT

52d • Onsite

About The Position

As a member of the Information Security team, responsibilities include manages and mitigates information security risk by identifying, evaluating, assessing, designing, monitoring, administering, reporting and implementing systems, policies and processes. Provides information security risk insight and guides management on information security risk issues and serves as advisor to peers, team members and management.

Requirements

• Bachelor's degree in Computer Science, MIS, Computer Engineering, Cyber Security or related discipline.
• 3 - 4 years related experience inclusive of two years working directly in an Information Services department and previous experience with HIPAA/PHI compliance programs, policies, procedures, risk assessments and audits.
• In-depth knowledge of cyber security methodology and security practices.
• Knowledge of HIPAA, PCI, SOX, ISO and NIST cybersecurity frameworks.
• Knowledge of intrusion detection and intrusion prevention systems, penetration and vulnerability testing.
• Knowledge of data loss prevention, anti-virus and anti-malware software tools.
• Knowledge of computer networking, TCP/IP, routing and switching, network protocols and packet analysis tools.
• Knowledge of Windows, UNIX and Linux operating systems.
• Excellent problem solving and analytical skills.
• Excellent written and oral communication skills.
• Excellent organizational and interpersonal skills.
• Ability to work independently as well as in a team setting.

Nice To Haves

• One or more of the following certifications are preferred: Certified Information Systems Security Professional (CISSP), or Certified in Risk and Information Systems Control (CRISC) or Certified Information Systems Auditor (CISA).

Responsibilities

• Define, implement, and enforce information security policies, strategies, and procedures that align with healthcare laws and regulations, such as HIPAA.
• Conduct and/or support targeted risk assessment.
• Determine significant risk points and exercise process for risk assessment and risk acceptance.
• Review assessment results for vulnerabilities, gaps, control deficiencies, and work with key stakeholders to establish plans for sustainable resolution.
• Maintain an effective information security awareness program and educate internal teams on best practices.
• Ensures that business and clinical software applications include adequate information and security controls.
• Establish and maintain metrics based on the information security framework used at SFHS.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level