Security Analyst

Position Title: Security Analyst Department: IT Department Reports To: IT Delivery Manager Objectives Benefitfirst is seeking a skilled Security Analyst that would review and prepare artifacts, documentation, and guidance in preparation for risk assessments and compliancerelated activities.

Work with a professional technical team, applying information security, risk, and compliance expertise in support of new and ongoing information security and compliance initiatives.

Major Responsibilities

• Assist in all SOC 1, SOC 2 and HIPAA audits
• Respond to client or vendor questionnaires in support of the sales team and contractual obligations
• Review investigation escalations from SOC Analysts to ensure accurate analysis and facilitates internal activities for these escalations
• Maintain documentation, procedures and processes that support our Security functions
• Assist in the establishment, implementation, and/or enhancement of information system security and compliance efforts based on Federal, State, and Agency policies, standards, and regulatory requirements.

• Must have excellent written and verbal communication skills and be able to effectively interact with internal and external team members, vendors, and other stakeholders
• A sound knowledge of IT security procedures, common attack types and detection / prevention methods
• Understanding of technical and security domains fundamental to Investigation and Incident Response
• Demonstrable experience of analyzing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviors
• Demonstrated ability to work effectively both independently and take direction within a team environment
• Experience with the following is plus: o SOC 1, SOC 2 and/or HIPAA audits o Internal Auditing o ITIL Incident and problem management processes o Security compliance programs, standards and regulations including NIST 800-53, NIST Cyber Security Framework, GLBA Education and Experience
• No degree required but preferred. Minimum 2 years of relevant work experience or the following certifications in lieu of experience: o CISA, CYSA+, CBCP preferred o Other certifications will be considered on a case-by-case basis