IT Security Analyst II

We are recruiting for a motivated IT Security Analyst II to join our team!

We are here for life’s journey.
Where is your life journey taking you?

Being the heartbeat of Denver means our heart reflects something bigger than ourselves, something that connects us all:

Humanity in action, Triumph in hardship, Transformation in health.

Department

Information Technology-Biomed

Job Summary

The IT Analyst Security II is responsible for multiple day-to-day security tasks and various information security projects as part of supporting the organization's information security needs. Day-to-day tasks include incident response, evaluation of requests for security changes, and monitoring of various security devices and audit logs. Responsibilities also involve providing ongoing support and advice to IT staff and end users on a variety of security issues, and ensuring that Denver Health's security policy and procedures are adhered to.

Essential Functions:

• In collaboration with infrastructure application teams and external department system administrators, implements and monitors organizational IT security policies and procedures, ensuring technical controls are enforced. (10%)
• Works with IT department managers and staff to ensure security issues are addressed as new equipment, facilities, systems, and software are installed. (10%)
• Develops processes for routine and requested internal audits of systems, applications, and data access including tools and techniques used to conduct audits. (5%)
• Conducts or coordinates audits on predefined schedule and when an audit is requested or indicated as part of an investigation. (5%)
• Documents audit findings and follows-up on access irregularities. (5%)
• Follows procedures and industry best practices for reporting and investigating IT related security incidents. (5%)
• Investigates and documents all reported or suspected security incidents. Maintains documentation of investigations and provides reports to the Chief Information Security Officer. (5%)
• Recommends implementation of corrective actions needed to mitigate security vulnerabilities. (5%)
• In coordination with Network/Server and Applications, develops procedures and technical controls to monitor appropriate administrator, end-user, vendor, and remote access to the Denver Health network, and IT systems. (5%)
• Investigates alerts to ensure that information is not altered or lost during storage, or transmission. (5%)
• Collaborates with the Project Management Office (PMO) on initiatives involving the IT Security program. (5%)
• Provide monthly metrics to the CISO and the IT Director of Information Security by the 3 rd business day of each month. (5%)
• Monitor and respond to help desk tickets within the documented Service Level Agreements (SLA). (5%)
• Maintain current documentation for all procedures and applications currently in use. (5%)
• Respond to all on-call notifications within required documented SLA’s. (5%)
• Responsible for periodically updating management, via written or verbal reports, on all issues, concerns, or problems related to the IT Security program. (5%)
• Monitors changes to applicable laws, industry standards, and regulatory or accreditation requirements, and incorporates requirements into the organization’s IT Security program. (5%)
• Plans and organizes time effectively. Integrate priority changes into work plans. Anticipates resource needs and plans accordingly. (5%)

Education:

• Bachelor’s degree required or a minimum of 5 years of IT experience required.
• At least one IT Security certification (i.e. CompTIA Security+) required.

Work Experience:

• 4-6 years required.

 

Knowledge, Skills and Abilities:

• Familiarity with regulations and compliance issues, preferably within the healthcare industry
• Demonstrated ability to drive multiple requirements across systems, users, and workflows
• Demonstrated ability to communicate with technical and non-technical stakeholders across the organization
• Working knowledge of IT Security tools and solutions
• Demonstrated ability to recognize and respond to alerts or other behaviors to quickly detect and mitigate potential threats
• Demonstrated ability to mentor, educate, and train other team members
• Familiarity with advanced networking concepts (i.e., TCP/IP)
• Strong understanding of Microsoft Windows desktop and server operating systems
• Familiarity with Linux operating systems
• Advanced knowledge of Web Security Solutions
• Advanced knowledge E-Mail Security Solutions
• Advanced knowledge of Security Incident Event Management (SIEM) systems
• Adva