The Cybersecurity Analyst employs cybersecurity best practices, risk management techniques, vulnerability assessments, protects our networks, information systems, and databases. They provide expertise and training to staff and vendors on cybersecurity.

Duties/Responsibilities:

• Responsible for ensuring products are safe, secure, and are compliant with division, corporate, and industry regulation and meet customer and patient security expectations.
• Works within an agile, collaborative, multi-discipline environment to produce compliant and secure products. Identifies cybersecurity risks, vulnerabilities, and helps concept and deliver mitigating functionality.
• Perform vulnerability assessments, analyze impact of vulnerabilities on software and develop/implement mitigations
• Perform threat analysis/modeling, gap analysis, and security for on-market and in-development products
• Owns the product cybersecurity deliverables and process compliance. Capable of following cybersecurity processes, methods, techniques, and tools and assuring their consistent application.
• Conducts cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements
• Evaluation of cybersecurity tooling and implementation as needed
• Participate in feature design, grooming, peer reviews and documentation processes to ensure secure product
• Build and maintain relationships necessary for the successful execution and sustainability of the product portfolio cybersecurity program
• Stay abreast of changes in the business and product environment as well as the evolving regulatory and threat landscape
• Ability to articulate technical discussions to a variety of internal, external, and customer stakeholder groups

Skills/Abilities:

• Good communication and project skills.
• Ability to work on multiple projects simultaneously.      

Education:

Bachelor’s Degree in Computer Programming, Computer Science, Information Technology, or related area preferred.        

Experience:

A minimum of one year of experience with information technology in implementation and operation of computer hardware, network and software solutions preferred. Must be able to communicate with a variety of hospital and information technology personnel. Team skills necessary to participate in projects with all levels of medical center staff. Systems analysis/design and/or computer programming preferred.

Licensure/Certification:

Cybersecurity/Security certification required.