What are the responsibilities and job description for the Information Security Analyst position at Ellis Medicine?
BASIC FUNCTION:
Under the general direction of the IT Technical Manager, the Information Security Analyst is responsible for the development and delivery of a comprehensive information security program at Ellis Medicine. Primary responsibilities include; ongoing management of information security policies, procedures; implementation of technical security controls in order to maintain the confidentiality, integrity and availability of all organizational healthcare information systems; conducts routine auditing and monitoring of information systems to ensure compliance with organizational policies and procedures; and partners with operational leads to ensure information security practices align with the organizations strategic business objectives. This position also serves as the organization's HIPAA Security Officer.
EDUCATION AND EXPERIENCE REQUIREMENTS:
Required
- Bachelor’s degree in information security assurance, Computer Science, Information Systems, or a related field.
- Two or more years of experience in Information Security, Information Technology, or related field.
OR
- Five years of experience in Information Security, Information Technology, or related field.
Preferred
Previous healthcare experience.
Certified Information Security Manager, Certified Information Systems Security Professional
GUIDING BEHAVIORS:
- Communication: Listen to understand, before seeking to be understood.
- Collaboration: Deliver outstanding service, ensuring that safety comes first.
- Compassion: Serve every person with empathy, dignity, and compassion.
PHYSICAL REQUIREMENTS:
- The position can be in or out of doors under normal working conditions. Should be able to push/pull, lift/move 35 lb., be able to perform moderately difficult manual manipulations such as using a keyboard, writing, and filing for extended periods of time, must be able to perform tasks which require hand-eye coordination such as data entry, typing and using photo copiers. Mobility requirements may include the ability to be stationary at a workstation for a prolonged period time, in addition to being able to squat or be mobile for a reasonable length of time and distance. Communication requirements include the ability to comprehend the spoken English language, in addition to being able to communicate and read the English language.
PRIMARY RESPONSIBILITIES OF THE POSITION:
- Responsible for implementing, managing, and enforcing information security directives as mandated by HIPAA.
- Ensure the ongoing integration of information security with business strategies and requirements.
- Ensure that the access control, disaster recovery, business continuity, incident response and risk management needs of the organization are properly addressed.
- Lead information security awareness and training initiatives to educate the workforce about information security risks.
- Perform ongoing information security risk assessments and audits to ensure that information systems are adequately protected and meet HIPAA certification requirements.
- Work with vendors, outside consultants, and other third parties to improve information security within the organization.
- Lead an incident response team to contain, investigate, and prevent future computer security breaches.
- Monitor IT security systems to identify and respond to risks and vulnerabilities.
- Work with 3rd party vendors to identify & resolve issues related to penetration testing and identified risks.
Ellis Medicine is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex/gender, age, national origin, disability, genetic information, predisposition or carrier status, military or veteran status, prior arrest, or conviction record, marital or familial status, sexual orientation, transgender status, gender identity, gender expression, reproductive health decisions, or domestic violence victim status.
Salary Range: $29.44-$44.16/hour Pay is based on experience, skills, and education. Exempt positions under the Fair Labor Standards Act (FLSA) will be paid within the base salary equivalent of the stated hourly rates. The pay range may also vary within the stated range based on location.