Apply on Employer Site

Your Health Idaho · 13 hours ago

Information Security Analyst

Your Health Idaho

Full-time

Onsite

Mid Level

$86K/yr - $95K/yr

3+ years exp

Your Health Idaho is seeking an Information Security Analyst to work alongside the Privacy and Security Officer to implement and administer IT security and privacy functions across the organization. The role involves monitoring IT security infrastructure, managing security platforms, and responding to security incidents while ensuring compliance with security policies.

GovernmentInsurance

Responsibilities

Primarily responsible for monitoring the IT security infrastructure, assisting with articulating technical security requirements, monitoring the effectiveness of existing IT security framework, making recommendations for enhancements, and raising the level of security awareness

Manage security information and event management (SIEM) platforms

Establish controls to support security and privacy policies/procedures and oversee their implementation

Ensure access to all information systems is controlled, both internally and externally, commensurate with the level of potential risk

Responsible for responding to information security incidents, to include coordination, root cause analysis, and other security investigation activities

Facilitate development, design, and implementation of proposed updates, enhancements and new functionality so that enterprise privacy and security is maintained

Participate in execution of IT security projects, such as risk assessments, security audits, vulnerability scans, and related

Participate in development of techniques, procedures, and utilities for improving the overall security posture of Your Health Idaho

Participate as a member of a team providing pertinent security information and input to strategic and tactical planning, initiatives and project planning

Identify emerging privacy and security practices and technologies to be assimilated, integrated, and introduced within the organization

Participate in ongoing improvements of system enhancements from an Information Security perspective

Assess new security threats and vulnerabilities and make recommendations on appropriate avoidance and mitigation strategies

Stay informed of evolving regulations, statues, threats, risks, technology, and recognized best practices and to regularly coordinate with counterparts at CMS, NIST, SANS and other privacy and security authorities

Participate in ensuring Idaho’s Authority to Operate by administering Your Health Idaho’s Authority to Connect (ATC) compliance package

Perform other duties as assigned

Qualification

CISSP certificationInformation SecurityCIA TriadVendor managementAnalytical skillsProject managementInterpersonal skillsProblem-solving skillsCommunication skills

Required

BA/BS in computer science or business-related field or equivalent

Thorough understanding of the CIA Triad (Confidentiality, Integrity, Availability)

Skilled across all areas of Information Security including Operations, Physical, Network, OS, Application Security

Demonstrated project management skills, vendor management, and analytical skills

Ability to balance strict regulations with the ambiguity seen in fast paced operations and a start-up organization

A committed team player with exceptional interpersonal, problem-solving, and communication skills with ability to develop and maintain cooperative and productive work relationships

Ability to assume responsibility and maintain confidentiality consistent with the values and integrity of YHI

Ability to work in an office environment. Frequent facilitation of meetings or group discussions

Ability to listen to and understand others as well as ability to give and receive instructions via telephone, electronically, face-to-face, and in writing. Must possess the ability to write and compose correspondence, memorandums, and reports manually and via computer or email

Occasional lifting or movement of materials up to 25 pounds

Availability to work additional hours or weekends as projects demand. Some travel may be required