Senior Security Analyst

Under direction of the CISO the position includes participating with the other security team members in the planning and design of the enterprise security architecture. The development and maintenance of information security policies, standards, baselines, guidelines and procedures.

The positions daily tasks include the purchase, install and operation of the layered security controls including NAC, EDR, SIEM, AV, IPS. 

Participating in vulnerability, risk assessments, penetration tests, and audits while interpreting the results to identify gaps and make recommendation on additional solutions or enhancements to improve the information security program.

Researching the latest security best practices, staying ahead of new threats and vulnerabilities and helping to communicate this information within the HITS teams as well as to other groups within the hospital.

• DNPFormal Education - College diploma or university degree in the fields of computer science

• Certifications - CISSP, GIAC or similar is preferred

• Experience - Minimum 5 years related IT security experience

• Knowledge - Strong knowledge and experience in some of the following areas.

• Layered network and host based security controls.

• Familiar with PHIPA legislation.

• Understanding of a common industry framework or standards like PCI, NIST, ISO.

• Incident Analysis and Response using tools like EDR and SIEM.

• Threat Risk Assessments.

• Network and Host Operating Systems.

• Security architectures in large complex infrastructures.

• Soft Skills include stress and time management and the ability to work independently.