Senior Security Analyst - IS-Security

Minimum Qualifications:

Bachelor's degree and three (3) years related Information Security or Information Technology experience. An equivalent combination of education and experience relevant to the role may be considered for this position.

Required:

Industry recognized cyber-security certification (CySA+, CEH, SSCP).

Preferred Qualifications: 

• Five (5) years of related Information Security or Information Technology experience.
• Multiple industry recognized cyber-security certifications (CySA+, CEH, SSCP).

Job Summary:

The Senior Security Analyst serves as a key leader within the organization's information security program, safeguarding sensitive clinical, academic, and administrative data across a complex healthcare, educational, and research environment. This role provides advanced technical expertise, strategic guidance, and hands-on support to strengthen the confidentiality, integrity, and availability of institutional information systems and resources.

Job Duties:

·         Lead and advise on information security initiatives in partnership with the Lead Security Analyst and Chief Information Security Officer, ensuring alignment with organizational risk, compliance, and operational priorities across healthcare and academic environments.

·         Drive the implementation and successful execution of approved security projects, providing technical leadership, project oversight, and cross-departmental coordination.

·         Serve as a subject matter expert on data confidentiality, system integrity, system reliability, and secure recovery practices, ensuring adherence to regulatory requirements such as HIPAA, FERPA, and other applicable standards.

·         Lead investigations into suspected or confirmed security incidents, including unauthorized access, data modification, disclosure, or destruction, and provide detailed analysis and reporting to leadership.

·         Oversee the evaluation, selection, configuration, and lifecycle management of security technologies, including software, utilities, and hardware. Direct remediation efforts for identified vulnerabilities and ensure timely risk reduction.

·         Maintain and enhance the organization’s security architecture and design, ensuring scalability, resilience, and alignment with industry best practices and emerging threats.

·         Develop, refine, and enforce technical security standards, frameworks, and incident response procedures to support organizational policies and regulatory obligations.

·         Conduct advanced analysis to identify and resolve security vulnerabilities, operational risks, and audit findings across applications, infrastructure, and legacy systems. Produce clear documentation and recommendations for corrective action.

·         Function as a Subject Matter Expert for security functions under assigned job responsibilities.

·         Direct and support investigations involving potential misuse, theft of information resources, or violations of institutional security and privacy policies, collaborating with legal, HR, compliance, and law enforcement as appropriate.

·         Monitor enterprise systems and networks for indicators of compromise, leveraging advanced detection tools and threat intelligence to rapidly respond to and contain security incidents.

·         Evaluate, implement, and optimize security controls to safeguard information assets, ensuring alignment with risk managemen