Information Security Analyst

Company: Ohio Shared Information Services Inc
Location: Denver
Posted on: April 9, 2021

Job Description:

JOB SUMMARY: The Information Security Analyst will assist with the implementation, monitoring, and delivery of security protocols for the protection of the organization to include the member's computer networks and information. You will be responsible for supporting the strategic risk management initiatives, leading implementation of security/risk management processes, facilitating efforts that require support from other stakeholders within the organization, providing industry expertise and knowledge in the identification and mitigation of organizational risk, and enabling compliance with industry standards and federal regulations.

ESSENTIAL JOB FUNCTIONS: The responsibilities listed are fundamental to the position and must be performed Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.
1. Serve as Security Risk Assessment expert to assist PHCs with training and technical assistance.
2. Develops security awareness training material. Promotes and trains PHCs and staff via material, webinars, etc.
3. Assist PHCs with Breech Mitigation plans for identified areas of concern on SRA audits.
4. Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.
5. Reviews violations of security procedures; provides training to ensure violations do not recur.
6. Monitors and restricts access to sensitive, confidential, or other high-security data.
7. Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures.
8. May implement and support security related applications and hardware to include but not limited to: Endpoint Security Solutions, Data Protection and Data Recovery.
9. Participate in state/local/national collaboratives supporting CHCs, including peer collaboration groups.
10. Performs other related duties as assigned.

SUPERVISORY RESPONSIBILITIES:
This position has no supervisory responsibilities.

WORK ENVOIRNMENT:
This job operates in a clerical office setting. This role routinely uses standard office equipment such as computers, phones, scanners, copy machines and filing cabinets. At times, this position may need to lift computer equipment unassisted at 100lbs.

PHYSICAL DEMANDS:
This is largely a sedentary role; however, some filing and order cleanup is required. This would require the ability to lift files, open filing cabinets and bend or stand as necessary.

POSITION TYPE/EXPECTED HOURS OF WORK:
This is a full-time position. Days and hours of work are Monday through Friday, 8 a.m. to 5 p.m. Occasional evening and weekend work may be required as job duties demand.

TRAVEL:
This position requires less than 5% travel.

REQUIRED EDUCATION AND EXPERIENCE:
--- Bachelor's degree in Computer Science, Programming, or a related field required
--- 3+ years of experience in implementing Security Risk Management programs
--- 3+ years of experience in translating security-themed regulations and frameworks into risk assessment processes and tools
--- 3+ years of experience in developing and assessing technical and process-based controls, managing risk assessments/investigations, and working with organization management to integrate controls into the scope of existing business practices
--- 1+ year(s) of experience in healthcare
--- 3+ years of experience in working with Federal, HIPAA, Meaningful Use/Promoting Interoperability and other healthcare security regulations.
--- 3+ years of experience in working with other security risk management requirements, regulations, or certifications such as PCI, SOX, SOC 1 & 2, ISO, HITECH, etc.

PREFERRED EDUCATION AND EXPERIENCE:
--- M.B.A. in Information Systems preferred.
--- At least three years of experience in computer systems with some specialization in computer security highly preferred.
--- Certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, CRISC or other relevant information security or risk management certifications

ADDITIONAL ELIGIBILITY QUALIFICATIONS:
--- Experience in healthcare related field
--- Experience working with non-profits

TELECOMMUTING AND TECHNICAL REQUIREMENTS:
This position may telecommute on an as needed basis.
Must have:

--- Cable or Fiber Internet Service
--- Download speed of 20Mbps or higher
--- Upload speed of 5Mbps or higher


OTHER DUTIES:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

PI132336296

Keywords: Ohio Shared Information Services Inc, Denver , Information Security Analyst, Professions , Denver, Colorado