Information Security Risk Analyst I

Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.

Participates in the development and maintenance of information security policies, standards, and procedures. Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements. Participates in risk analysis of identified issues to determine recommended risk treatment.

Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery. Coordinates business and information services resources for project and operational support. Stays up-to-date and informed of information security industry changes and trends.

Education Requirement: BS in Computer Science or equivalent experience required. Continues to stay actively involved in outside education advancement. Licensure Requirement: (not specified)

Security+, CISSP or equivalent preferred.

Strong problem-solving ability. Exceptional presentation skills. Exceptional interpersonal, written, and verbal communication skills.

Demonstrated project management skills. Proficient in Microsoft Office.

Twoyears of experience in IT; experience in healthcare, preferred. Physical

OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, Walking FREQUENTLY: (none specified) CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing – Far/near, Sitting Additional Physical Requirements performed but not listed above: (not specified) "The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification.

It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet"