Cyber Security Analyst

System One - Baltimore, MD

Full-time - Entry Level

Remote - Baltimore, MD

Administrative and Support Services

About the position

The Cyber Security Analyst role is focused on protecting the organization's data from unauthorized access, disclosure, and damage. The analyst will support the Cybersecurity Risk Management program, collaborate with various teams, assess cybersecurity controls, and ensure compliance with relevant regulations. This position is essential for maintaining the confidentiality, integrity, and availability of information systems and data while advocating for cybersecurity best practices.

Responsibilities

• Support the Cybersecurity Risk Management program and guide a team of cybersecurity specialists.
• Partner with TPRM, Procurement, Legal, and key business stakeholders for continuous monitoring efforts.
• Assess cybersecurity controls, identify gaps, and develop mitigation strategies.
• Collaborate with internal and external teams to manage risks effectively.
• Conduct thorough assessments with business teams to identify potential risks and evaluate security practices.
• Represent Cybersecurity in risk management and implement cybersecurity controls.
• Prepare detailed risk assessment reports and maintain a comprehensive repository of documentation.
• Conduct risk analyses to ensure consistency in the risk assessment lifecycle.
• Design and implement security solutions to address enterprise risks.
• Develop and maintain Information Security Risk Metrics supported by KPIs and KRIs.
• Test and report on new technologies to address security concerns and collaborate with the vulnerability management team.
• Support compliance efforts with NIST, FedRAMP, and HIPAA.

Requirements

• Bachelor's Degree in Information Security, Cyber Security, or IT Technology.
• 3+ years of experience in Cyber Security and Risk Management.
• High level of expertise in information security concepts and policies.
• Good understanding of networking, operating systems, and security technologies.
• Knowledge of vulnerability assessments, incident response, and security policy creation.
• Ability to learn Information Security tools in a complex environment.
• Strong problem-solving skills and ability to develop security solutions.
• Excellent written documentation and technical writing skills.
• Strong presentation and verbal communication skills.
• Ability to work independently with minimal supervision.

Nice-to-haves

• Healthcare industry background/experience.
• Experience with Cybersecurity Governance, Risk, and Compliance (eGRC) Programs.
• Ability to translate technical requirements to business needs.
• Understanding of relationships among various corporate units.
• Ability to develop and socialize security policies and standards.
• Proficiency with security controls for cloud environments (Azure and AWS).
• Familiarity with security tools for vulnerability assessment and data loss prevention.
• Experience with Information Security tools in a multi-platform environment.
• Familiarity with HIPAA Security Rule and compliance requirements.
• Experience in risk management, compliance, audit, or third-party assessments.

Benefits

• Health and welfare benefits coverage options including medical, dental, and vision.
• Life insurance and voluntary plans.
• Participation in a 401(k) plan.