"Alerted.org

Job Title: Information Security Analyst - SeniorDepartment: Information Security - Governance, Risk and ComplianceLocation: Riedman CampusSUMMARY: The Information Security Senior Analyst role supports the Information Security function for the Rochester Regional Health system and is responsible for leading information security services such as coordinating risk assessments, compliance tracking, vulnerability management and remediation, incident response planning and execution, security engineering or identity access management. The role will focus in particular on Governance, Risk and Compliance responsibilities and leading assigned information security services in collaboration with various teams and stakeholders.

RESPONSIBILITIES:

+ Leads one or more assigned cybersecurity service with minimal direction from the Director

+ Recommends and executes leading practices and standards for the their assigned service area(s) by keeping abreast of latest security trends, vulnerabilities, threats, and technology solutions

+ Ensures compliance with legal requirements and industry standards for information security.

+ Conducts assessments, analyses, engineering, configurations, mitigations and investigations as required by the service area(s)

+ Manages the implementation of new services, processes or technologies in their assigned service area(s)

+ Manages changes, downtimes and incidents for their assigned service area avoiding and minimizing unplanned disruption to other services. Keeps abreast of IT changes which may impact their service

+ Develops service levels and monthly metrics for their service area(s) and generates monthly reporting. Identifies service area coverage gaps across the healthcare systems, understands associated risks and advocates for prioritized remediations or mitigations

REQUIRED QUALIFICATIONS:

+ Bachelor's Degree required.

+ 3 years of Information Technology experience required.

PREFERRED ATTRIBUTES:

+ Certified Information Systems Security Professional (CISSP) or similar certification.

+ Knowledge of global standards related to cybersecurity and privacy.

+ Proficient knowledge of cybersecurity technical and process controls

+ Specialization in one field of cybersecurity

+ Project management, change management and communications experience ​

EDUCATION:

LICENSES / CERTIFICATIONS:

PHYSICAL REQUIREMENTS:

L - Light Work - Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force frequently, and/or a negligible amount of force constantly; requires occasional walking, standing or squatting.

For disease specific care programs refer to the program specific requirements of the department for further specifications on experience and educational expectations, including continuing education requirements.

Any physical requirements reported by a prospective employee and/or employee’s physician or delegate will be considered for accommodations.

PAY RANGE:

$80,000.00 - $115,000.00

CITY:

Rochester

POSTAL CODE:

14617

The listed base pay range is a good faith representation of current potential base pay for a successful full time applicant. It may be modified in the future and eligible for additional pay components. Pay is determined by factors including experience, relevant qualifications, specialty, internal equity, location, and contracts.

Rochester Regional Health is an Equal Opportunity/Affirmative Action Employer. Minority/Female/Disability/Veterans by a prospective employee and/or employee’s Physician or delegate will be considered for accommodations.