Lead IT Security Analyst i IV

Job Summary:

This position is a lead security analyst within IT Security Governance and IT Security Operations.IT Security Operations:

Responsibilities:

• Recommend FireWall change requests for approval
• Analyze and take appropriate action on intrusion detections
• Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance
• Review and approve access requests
• Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles
• Map work flows in provisioning users into our systems and infrastructure
• Comply with internal and external audit requests
• Monitor the effectiveness of the Enterprise wide information security program
• Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations
• Participate in investigating possible security violations
• Track and maintain operational security access metrics

IT Security Governance:

• Provide guidance and direction regarding security control elements in policies throughout the organization
• Document relevant business processes and their implications on information security
• Design work flow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information
• Develop information security risk identification, tracking and mitigation processes strategy and methodology
• Develop the information security awareness, training and education program-s strategy and methodology
• Facilitate or lead development of accurate and relevant information security process and operational metrics
• Establish monitoring measures to detect and ensure correction of security breaches and policy violations
• Proactively keep current on information security issues related to business processes as input into departmental policies and procedures
• Analyze and enhance the effectiveness of the Enterprise wide information security program

Knowledge:

• Requires an excellent understanding of IT security concepts with an emphasis on Security and Risk Assessment
• Requires excellent knowledge of IT and computer systems
• Requires excellent understanding of internal and external audit process
• Requires in-depth understanding of Public Key Infrastructure (PKI), encryption, network security controls tools and functionalities
• Requires demonstrated proficiency in applying HIPAA security rules and National Institute of Standards and Technology (NIST) standards
• Requires demonstrated proficiency in applying Identity Management (IDM) concepts
• Requires exceptional analytical thinking skills
• Requires excellent verbal and written communication skills
• Requires excellent interpersonal skills and the ability to work effectively with others as a team
• Requires excellent PC skills and demonstrated proficiency with MS Office Suite
• Requires the ability to handle multiple tasks and prioritize effectively

Education/Experience:

• Requires Bachelor's degree, preferably in Computer Science, from an accredited college or university
• Prefers advanced degree in Information Security, Computer Science or related field
• 7-9 years prior IT security related work experience
• Requires one or more of the following certifications: CISSP, SANS GIAC or CISA

All your information will be kept confidential according to EEO guidelines.