IT Security Analyst Sr

Works with Manager IT Operations Security, Health Technology Management, Lab Information Systems, Medical Imaging and other operational technology departments to help assure protection and resiliency of specialized devices utilized throughout Lurie Children’s.

Essential Job Functions:

• Provide cybersecurity expertise for medical devices and related technological solutions;

• Apply understanding of product/line and clinical applications to identify potential cybersecurity threats and develop mitigations;

• Perform threat modeling on device security architecture and assess cybersecurity risks and risk mitigations;

• Lead medical device cybersecurity risk assessments and mitigation initiatives;

• Understand interdependencies of processes required to accomplish department and organizational objectives.

• Support process definition and improvements;

• Demonstrate skill for independent analysis and synthesis of solutions for problems, exhibiting creativity, foresight, innovation, and judgment in anticipating and solving these problems;

• Consistently apply complex analytical methods;

• Independently plan and manage your work to achieve objectives within the security team and cross-functional teams

• Provide technical consulting, collaboration and advice to peers

• Define cybersecurity requirements for design elements at the module level.

• Automate repeatable tasks to improve efficiencies and expedite responses

Knowledge, Skills and Abilities:

• Minimum of a Bachelor’s degree in a major science or engineering discipline (e.g., Cybersecurity, Systems, Biomedical, Electrical, Mechanical, Software, IT) or related field (or equivalent work experience)

• Significant and relevant overall engineering or equivalent experience and education, including demonstrated experience conducting Product Safety, Security Risk Assessments, and Security-by-Design

• Experience with product cybersecurity design, policies, support and maintenance

• Experience with medical device or other highly regulated applications

• Proven engineering knowledge crossing into multiple technical disciplines

• Experience with Security tools ( i.e. Firewalls, EPP, SIEM, Qualys, Rapid7 )

• Demonstrated skill for troubleshooting complex problems exhibiting creativity, foresight, innovation, and judgement

• Excellent persuasion and consensus-building with the ability to work in cross-functional teams

• Working knowledge of MS Office applications and statistical analysis skills

• Ability to independently plan and manage own work activities to achieve department objectives

• Strong competency in Customer Focus, Driving for Results, Integrity and Trust, Ethics and Values and Compassion

• Other duties as assigned