IT Security Analyst II
Under the direction of the Director, IT Security and Compliance this position will perform IT security analysis and assessments in accordance with established procedures and protocols. Ensures the demonstrable Confidentiality, Integrity and Availability (CIA) of MIHS's information assets for authorized internal and external users by reviewing, validating, classifying, and responding to security events and cyber-attacks. The Information Technology Security Analyst will assist with meeting the requirements of all four domains (Security Oversight, IT Risk Assessment, Security Engineering, and Security Operations) and focus in depth upon the domain requirements of Security Operations and IT Risk Assessment. This position will provide education to others on IT security risk remediation/mitigation and industry best business practices.
*** Highly Preferred ***
· Enterprise-wide risk management and analysis
· Experience with HIPAA and HITECH compliance
· Experience with NIST Cybersecurity Framework
· Splunk Implementation and management
Requires a Bachelor's Degree in Information Systems (IS) or related field; or an equivalent combination of training and progressively responsible experience that will result in the required specialized knowledge and abilities to perform the assigned work in lieu of degree. A Master's degree is preferred and may substitute for required experience. Requires at least three (3) years of progressively responsible information systems and application security analysis experience that demonstrates an understanding of the required knowledge, skills, and abilities. Prefer experience administering a SIEM solution. Requires Global Information Assurance Certificate (GIAC) Certified Incident Handler (GCIH) certification within 18 months of starting in the position. Must be able to analyze IT security threats, understand risk, articulate operational impact and work as part of a team dedicated to achieving and maintaining compliance to all applicable regulations. Requires the ability to provide guidance to senior management and peers in assessing and identifying threats and vulnerabilities. Must be able to perform IT security risk assessments, develop and resolve complex security related issues, recommend, develop and implement compensating controls to remediate or mitigate known risk and vulnerabilities to an acceptable level A functional understanding of regulatory and compliance mandates, including but not limited to HIPAA, HITECH, PCI, Sarbanes-Oxley is preferred. Must be able to create, expand and maintain relationships with peers and stakeholders. Must be attentive to communications interaction; demonstrate comprehension of detailed information; and adapt to a variety of verbal styles and modes of persuasion. Must possess excellent conflict resolution skills and promote a cordial and professional work environment. Must be reliable and have the ability to inspire performance and take bold and decisive action despite risks and uncertainty. Requires the ability to read, write and speak effectively in Technical and Business English.
Living our values
At Maricopa Integrated Health System, our values inspire us to dream big and reach high. And we’re delivering some of the most sophisticated care in the country, while making a genuine difference in the lives of our patients and each other. That's the power of an environment driven by values like respect, leadership, compassion and education.
- Maricopa Medical Center, a critical care hospital - the largest teaching hospital in AZ
- The Arizona Burn Center, a nationally renowned regional burn center- 2nd largest in the nation
- A level 1 Trauma Center and emergency department
- The Arizona Children’s Center at MIHS, a 24/7 Level 1 Pediatric Trauma Unit
- The Comprehensive Healthcare Center
- The Desert Vista Behavioral Health Center
- 12 Family Health Centers located throughout Maricopa County
- Competitive wages
- Medical, dental and vision coverage
- Arizona State Retirement System Plan with a lifelong pension upon retirement
- Generous PTO + 10 holidays per year