Cyber Security Analyst

System One - Baltimore, MD

Full-time - Mid Level

Remote - Baltimore, MD

Administrative and Support Services

About the position

The Cyber Security Analyst role is focused on protecting the organization's data from unauthorized access, disclosure, and damage. The analyst will support the Cybersecurity Risk Management program, collaborate with various teams, assess cybersecurity controls, and develop mitigation strategies. This position requires a strong understanding of information security concepts and the ability to communicate effectively with both technical and non-technical stakeholders.

Responsibilities

• Support the Cybersecurity Risk Management program and guide a team of cybersecurity specialists.
• Partner with TPRM, Procurement, Legal, and key business stakeholders for continuous monitoring efforts.
• Assess cybersecurity controls, identify gaps, and manage mitigation strategies to closure.
• Collaborate with internal and external teams to manage risks effectively.
• Conduct thorough assessments with business teams to identify potential risks and evaluate security practices.
• Represent Cybersecurity in risk management and implement cybersecurity controls to maintain data integrity.
• Prepare detailed risk assessment reports and maintain a comprehensive repository of documentation.
• Conduct risk analyses to ensure consistency in the risk assessment lifecycle.
• Design and implement security solutions to address enterprise risks.
• Develop and maintain Information Security Risk Metrics supported by KPIs and KRIs.
• Test and report on new technologies to address security concerns and collaborate with the vulnerability management team.
• Support compliance efforts with NIST, FedRAMP, and HIPAA.

Requirements

• Bachelor's Degree in Information Security, Cyber Security, or IT Technology.
• 3+ years of related work experience in Cyber Security and Risk Management.
• High level of expertise in information security concepts and policies.
• Good understanding of networking, operating systems, and security technologies.
• Knowledge of vulnerability assessments, incident response, and security policy creation.
• Ability to quickly learn Information Security tools in a complex environment.
• Strong problem-solving skills and ability to develop security solutions.
• Excellent written documentation and technical writing skills.
• Strong presentation and verbal communication skills.
• Ability to work independently with minimal supervision.

Nice-to-haves

• Healthcare industry background/experience.
• Experience with Cybersecurity Governance, Risk, and Compliance (eGRC) Programs.
• Ability to translate technical requirements to business needs.
• Understanding of relationships among various corporate units.
• Ability to develop and socialize security policies and standards.
• Proficiency with security controls for cloud environments (Azure and AWS).
• Familiarity with security tools for vulnerability assessment and data loss prevention.
• Experience with Information Security tools in a multi-platform environment.
• Familiarity with HIPAA Security Rule and compliance requirements.

Benefits

• Remote work flexibility
• Potential for contract extension or permanent rollover