Risk Analyst II - InfoSec
Role Overview
Senior-level role on the Digital Transformation Information Services Information Security team.
Designs, implements, and manages enterprise security solutions and enforces network security policies.
Works across clinical, ancillary, administrative, and financial business areas.
Key Skills for This Role
Full Job Posting
Role overview
Senior-level role on the Digital Transformation Information Services Information Security team.
Designs, implements, and manages enterprise security solutions and enforces network security policies.
Works across clinical, ancillary, administrative, and financial business areas.
Security operations and delivery
- Manage Cisco security platforms, including Secure Network Analytics/Stealthwatch, ISE, AnyConnect, Firepower, and Umbrella.
- Configure and optimize Palo Alto firewalls; administer enterprise email security and filtering.
- Design cloud security controls and network segmentation aligned with zero-trust principles; deploy zero-trust/SASE remote access.
- Administer IAM controls and Microsoft Entra ID Conditional Access and Authenticator MFA.
- Deploy and monitor CrowdStrike EDR; respond to EDR/XDR and other endpoint alerts.
- Support OT, IoT, and medical-device security, including visibility, vulnerability identification, remediation, and risk reduction.
- Investigate alerts, support incident response, and coordinate remediation with IT and infrastructure teams.
- Oversee security upgrades, troubleshoot issues, verify system availability and performance, and maintain documentation and runbooks.
- Coordinate system and project rollouts, problem resolution, and end-user support with other IT teams; assist junior colleagues.
Experience and education
- Requires 5–7 years of IT infrastructure or IT security experience.
- Requires hands-on Cisco security experience, including Secure Network Analytics/Stealthwatch and ISE.
- A bachelor’s degree in IT, information security, or a related/relevant discipline is specified; equivalent education and experience may substitute.
Certification and specialized experience
- CISSP or equivalent industry certification is required.
- Special requirements include experience managing Palo Alto firewalls, experience with enterprise email security and filtering, and a strong understanding of cloud security.
Additional capabilities
- Knowledge of medical data reporting systems and program planning and evaluation techniques.
- Ability to analyze information security data, forecast trends, collaborate with technology and medical professionals, and communicate effectively.
- Ability to use standard office, email, calendar, and database applications; sound judgment, initiative, accuracy, and thoroughness.
Position details
- Full-time position with a Monday–Friday, 8:30 a.m.–5:00 p.m. day schedule.
Hiring range
- Hiring range is $110,564–$138,996 per year.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Westchester Medical Center Health Network
Risk Analyst I - InfoSec
Valhalla, USA
The Information Security team is seeking a Risk Analyst I to support enterprise security systems, controls, monitoring, and incident response. The role requires 2–4 years of IT infrastructure or security experience and a
Network Manager, Billing Compliance
Valhalla, USA
The Network Manager, Billing Compliance leads system-wide billing compliance operations for a healthcare network. This manager oversees audits, regulatory monitoring, corrective action plans, training, external reviews,
