Information Security Analyst

Position overview

Primary duties

• Monitor and triage the team mailbox and ticket queue; respond to workforce inquiries, route or escalate requests, and document and close tickets under team procedures and SLAs.
• Conduct routine investigations, including fact-finding, analysis, documentation, and summary reporting.
• Assist with risk surveys, assessments, inventories, and gap analyses against security and privacy standards.
• Support security projects, audits, and workplans through planning, execution, documentation, follow-up, and stakeholder updates.
• Coordinate evidence collection, assessments, and periodic reviews for third-party and vendor risk management.
• Develop, review, and maintain security policies and procedures and respond to routine policy interpretation requests.
• Develop and deliver department-specific security training and partner with Communications on awareness initiatives.

Minimum qualifications

• High school diploma or GED is required.
• Three years of information security, privacy, risk, audit, or related experience is required.
• Three years supporting security programs in healthcare or another regulated environment is preferred.
• Security+ or an equivalent information security certification is strongly preferred.

Knowledge and skills

• Ability to maintain confidentiality and handle sensitive patient, employee, and organizational information with discretion.
• Familiarity with healthcare security and privacy requirements, including HIPAA/HITECH and applicable state privacy requirements, and general compliance concepts.
• Familiarity with frameworks and controls such as NIST CSF and basic NIST control principles.
• Strong analytical and problem-solving skills, including gathering facts, identifying patterns and trends, and escalating issues appropriately.
• Strong documentation skills for investigation notes, assessment results, training materials, and stakeholder summaries.
• Effective communication with non-technical audiences and collaboration across teams; strong organization and time management.

Working conditions

• The role has on-call requirements.

Work location

• Hybrid schedule requires two to three days onsite per week.

Compensation

• Annual salary range is $76,300 to $92,100.