Job description

Summary: The Cybersecurity Analyst II is responsible for the review and implementation of IT Governance, Risk and Compliance (GRC) aspects of the business. This position will work closely with business stakeholders and junior Cyber Analysts during contract negotiations and will conduct Vendor Risk Assessments (VRA) and Application Risk Assessments (ARA) using industry NIST/ISO best practices. This position should have a strong understanding of Security Governance frameworks/standards such as HIPAA, PCI/DSS, NIST and ISO. Additionally, the ability to work with structure policies and procedures along with keeping such documents current is critical. Further, this position requires exceptional customer service skills with the ability to communicate with many internal/external customers at different levels within the organizational hierarchy. The Cybersecurity Analyst II is also responsible for supporting the business goals and objectives for the Department, the Information Management Organization, and the organization as a whole. Responsibilities: • Meets expectations of the applicable OneCHRISTUS Competencies: Leader of Self, Leader of Others, or Leader of Leaders. • Identifies and classifies Information Security Risks. • Works with business stakeholders to classify and mitigate identified security risks. • Provides daily support of Business Stakeholders as assigned by the Security Assurance ticketing system and peer reviews of other Cyber Team Members work. • Researches and understands emerging information security threats and vulnerabilities. • Performs “other” risk assessments under the guidance of the Director of Information Security; such as HIPAA, PCI/DSS, etc. • Assists with the selection and implementation of tools which enforce or monitor compliance with information security policies, standards and requirements. • Provides after hours coverage for security event monitoring and incident response. • Maintains and demonstrates the ability to work well on assigned tasks through actions and job performance. • Collaborates with and assists IM leaders, directors and staff in the fulfillment of corporate objectives and goals. • Follows approved mechanisms to document and report on all incidents/events.. • Escalates issues appropriately. • Assists in the development of the security plan. Job Requirements: Education/Skills • Associate’s Degree in related fields, or equivalent years of experience, preferred Experience • 3 years of demonstrated “hands on” IT Support, Audit/Compliance, or Cyber experience preferred Licenses, Registrations, or Certifications • Two or more of the following certifications preferred: • CYSA • Security+ • Network+ • CISA In accordance with the CHRISTUS Health License, Certification and Registration Verification Policy, all Associates are required to obtain the required certifications for their respective positions within the designated time frame. Work Schedule: 8AM - 5PM Monday-Friday Work Type: Full Time

Requirements

Must-haves

Meets expectations of the applicable OneCHRISTUS Competencies: Leader of Self, Leader of Others, or Leader of Leaders.
Identifies and classifies Information Security Risks.
Works with business stakeholders to classify and mitigate identified security risks.
Provides daily support of Business Stakeholders as assigned by the Security Assurance ticketing system and peer reviews of other Cyber Team Members work.
Researches and understands emerging information security threats and vulnerabilities.
Performs “other” risk assessments under the guidance of the Director of Information Security; such as HIPAA, PCI/DSS, etc.
Assists with the selection and implementation of tools which enforce or monitor compliance with information security policies, standards and requirements.
Provides after hours coverage for security event monitoring and incident response.
Maintains and demonstrates the ability to work well on assigned tasks through actions and job performance.
Collaborates with and assists IM leaders, directors and staff in the fulfillment of corporate objectives and goals.
Follows approved mechanisms to document and report on all incidents/events..
Escalates issues appropriately.
Assists in the development of the security plan.
Education/Skills
Licenses, Registrations, or Certifications
8AM - 5PM Monday-Friday

Nice-to-haves

Associate’s Degree in related fields, or equivalent years of experience, preferred
3 years of demonstrated “hands on” IT Support, Audit/Compliance, or Cyber experience preferred
Two or more of the following certifications preferred: • CYSA

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: careers-page
Effort: medium