Cyber Security Analyst

System One - Baltimore, MD

Full-time - Entry Level

Remote - Baltimore, MD

Administrative and Support Services

About the position

The Cyber Security Analyst role is focused on protecting the organization's data from unauthorized access, disclosure, and damage. The analyst will support the Cybersecurity Risk Management program, collaborate with various teams, assess cybersecurity controls, and ensure compliance with relevant regulations. This position is essential for maintaining the confidentiality, integrity, and availability of information systems and data.

Responsibilities

• Support the Cybersecurity Risk Management program by providing guidance to a team of cybersecurity specialists.
• Partner with TPRM, Procurement, Legal, and key business stakeholders for continuous monitoring efforts.
• Assess cybersecurity controls, identify gaps, and assist in developing mitigation strategies.
• Collaborate with internal and external teams to manage risks effectively.
• Conduct thorough assessments with business teams to identify potential risks and evaluate security practices.
• Represent Cybersecurity in risk management and implement cybersecurity controls.
• Prepare detailed risk assessment reports and maintain a comprehensive repository of documentation.
• Conduct risk analyses to ensure consistency in the risk assessment lifecycle.
• Design and implement security solutions to address enterprise risks.
• Develop and maintain Information Security Risk Metrics supported by KPIs and KRIs.
• Test and report on new technologies to address security concerns and collaborate with the vulnerability management team.
• Support compliance efforts with NIST, FedRAMP, and HIPAA.

Requirements

• Bachelor's Degree in Information Security, Cyber Security, or IT Technology is required.
• 3+ years of related work experience in Cyber Security and Risk Management.
• High level of expertise in information security concepts and policies.
• Good understanding of networking, operating systems, and security technologies.
• Knowledge of vulnerability assessments, incident response, and security policy creation.

Nice-to-haves

• Healthcare industry background/experience.
• Experience with Cybersecurity Governance, Risk, and Compliance (eGRC) Programs and Platforms.
• Ability to translate technical requirements to the business.
• Understanding of relationships among various units within the corporation.
• Proficiency with security controls for cloud environments (Azure and AWS).
• Familiarity with security tools such as vulnerability assessment applications and Data Loss Prevention.
• Experience working with Information Security tools in a large, complex environment.
• Familiarity with HIPAA Security Rule and compliance requirements.

Benefits

• Health insurance coverage options including medical, dental, and vision.
• Life insurance coverage.
• Participation in a 401(k) plan.