Information Security Analyst

PacMed Clinics seeks Information Security Analyst to perform the following duties: Conducts routine risk assessments and audit activities to identify risks to the confidentiality, integrity, and availability of information systems, in compliance with State, Federal laws, organizational policies and standards. Provides exposure to the diverse aspects of our business through collaboration with different business leaders related to our technology security controls, processes, and systems. The work performed is critical to reducing risk and providing necessary oversight to ensure compliance with regulatory and Dept of Defense (DoD) contract requirements related to cyber-security. This position supports critical access control assessments to ensure appropriate access and appropriate termination controls are enforced. This role is a key member of the Incident Response team and assists with the detection, analysis, containment, eradication and recovery activities. Participate in a variety of enterprise-wide cyber security compliance audits and risk-based assessments. The audit plan for each year changes along with emerging cyber threats, the risks they pose to our business as well as changes to regulatory and DoD contract requirements. The Information Security Analyst will utilize various tools and methods to provide support to end users, technology teams, and projects on a regular and ad hoc basis. Responsible for working collaboratively and effectively with caregivers across the enterprise to conduct information security activities such as, but not limited to analyzing information security risk and threat data, monitoring and investigating anomalies, developing and promulgating security controls and risk mitigation recommendations, establishing standards, determining information security-related business needs and requirements for potential projects/initiatives, contributing to the system-wide information security training and awareness program, and evaluating and working with regional and local partners to establish and exercise baseline business continuity management capabilities, and enhanced physical security programs.

Employer will allow a hybrid work schedule (1-2 days remote/3-4 days onsite). Must reside in Washington State.

Requirements:

· Bachelor’s degree in Computer Science, Management Information Systems, Information Security, Electrical Engineering, Business or related field. · 5 years of experience in Information Security or related. · One of the following certifications: Certified Information Systems Security Professional, Certified Information Systems Auditor, Certified Information Security Manager (CISM), Certified Business Continuity Professional (CBCP), Master Business Continuity Professional (MBCP), PCI-ISA designation (Payment Card Industry-Internal Security Assessor), or PCIP (Payment Card Industry Professional).

· Requires skills and experience in the following:

o Demonstrated experience in service delivery, process definition, and basic system development. o Hands-on experience with security risk management practices. o Strong day-to-day understanding of information security and risk management. o Knowledge of regulatory and industry compliance requirements such as NIST 800-171 Framework for Improving Critical Infrastructure Cybersecurity, HIPAA, HITECH, HITRUST, JCAHO, ISO 27001, PCI DSS, etc. o Design, develop and document risk and/or business functions business continuity plans in a Governance, Risk and Compliance (GRC) tool. o Execution of technology-based audits and control assessments. o Expertise with functions being audited to verify the effectiveness of existing technology controls. o Work with asset owners to identify technology control risks to improve process effectiveness. o Executing risk-based audit programs to assess the design and effectiveness of security controls for systems and processes. o Researching and performing interviews to understand existing processes and technology. o Knowledge and implementation experience with commonly accepted industry standards and best practices including ISO 27000, COBIT, HIPAA, PCI-DSS, NIST 800-53 and 800-171

Rate of Pay: $179,234 per year.

Medical, Dental, Life Insurance, FSA. Full benefits and application at: providenceiscalling.jobs