Sr. IT Security Analyst (Full-Time, 40 Hours, Day Shift)

Responsibilities I. JOB

• Key responsibilities include but are not limited to the following: o Support and management of QHS’ information security technical controls, programs and policies. o Support QHS IT and business initiatives and projects by providing information security-related consultation and technical assistance. o Leads or assists in the design, planning, and implementation of security measures to ensure safety and security of all information systems assets and to enhance the security posture of the organization. o Serves as a technical subject matter expert in support of security risk management and the IT Risk Management Program.
• Actively promotes awareness and training of QHS Security Policies and related security topics.
• Works closely with leadership to support and maintain The Queen’s Health Systems’ (QHS) information security program.
• Works closely with leadership, including the privacy, risk and compliance functions, to ensure compliance with regulatory requirements.
• Works closely with leadership in developing short and long term strategic plans.
• Supervises and directs work of assigned staff.
• Monitors activities to ensure coordination and management of projects and work assignments meet established dates and timelines. II. TYPICAL PHYSICAL DEMANDS: A.

• Finger dexterity. Seeing. Hearing. Speaking. B. MANUAL MATERIAL HANDLING:
• Infrequent: N/A
• Occasional: Carry between 11-20 lbs.
• Frequent: N/A
• Constant: N/A C. NON-MANUAL MATERIAL HANDLING:
• Infrequent: N/A
• Occasional: Stoop/Bend. Reach: above head.
• Frequent: Stand. Walk.
• Constant: Sit. III. TYPICAL WORKING CONDITIONS:
• Not substantially subjected to adverse environmental conditions.
• Work schedule includes providing 24 hours/7 days a week support as required. IV.

A.

• Bachelor's degree required, preferably in Information Technology (IT) or related field; or four (4) years experience in information technology and/or information security may be substituted for the educational requirement. B. CERTIFICATION AND

• Current certification in at least one (1) of the following highly preferred: Global Information Assurance Certifications (GIAC), Certified Information Security Manager (CISSP) or Certified Information Security Manager (CISM). C.

• In addition to the educational requirement, six (6) years of information security experience, preferably in healthcare, demonstrating in-depth knowledge and ability to independently design and manage complex security controls and processes.
• Prior supervisory/management experience.
• Knowledge and ability to lead projects/initiatives of moderate complexity.
• Experience to demonstrate the following IT Security Management

o IT Security architecture design and implementation o Web and E-mail Security o Cloud Security o Data Loss Prevention (DLP) o Encryption o Identity and Privileged Access Management o Secured authentication solutions o Firewall management o Programming and/or scripting • Two (2) years IT project management experience preferred. Equal Employment Opportunity Equal Opportunity Employer / Disability / Vet