Cybersecurity Analyst

DivIHN Integration - Saint Paul, MN

Full-time - Mid Level

Saint Paul, MN

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Analyst role at DivIHN involves supporting cybersecurity operations by designing and implementing secure technical solutions. The position focuses on ensuring the protection of organizational systems and information while enabling the achievement of business objectives. The analyst will manage cybersecurity toolsets, perform threat analysis, and collaborate with various teams to enhance the organization's security posture.

Responsibilities

• Develop a risk-based cyber security program that meets regulatory requirements and aligns with industry standards.
• Perform threat identification and mitigation activities using leading security controls and tools.
• Advance the company's cyber threat and vulnerability management program for consistent identification and response to threats.
• Assess threats to the business and deploy countermeasures accordingly.
• Collaborate with business units and third-party vendors to meet program requirements.
• Apply technical knowledge to protect the company against cyber threats using various security technologies.
• Facilitate cross-team coordination to achieve defined security goals and support implementation plans for security projects.
• Manage security projects to ensure timely and effective implementation of cybersecurity improvements.
• Perform assessments of cybersecurity incidents to identify root causes and recover the environment.
• Develop strategies, policies, and standards to protect company information and technology assets.
• Manage capital and operational expense budgets for accurate forecasting.

Requirements

• At least 5 years of experience in cybersecurity, typically 7+ years preferred.
• Expertise in implementing industry standards such as ISO 27001/2, SOC 2, HITRUST, and FedRAMP.
• Experience with GRC toolsets (Governance Risk and Compliance).
• Possess CISSP certification or similar, with knowledge of regulatory compliance frameworks like ISO, SOX, HIPAA, and PCI DSS.
• 5+ years in a technical advisory role within cybersecurity or as a product engineer with a cybersecurity focus.
• Professional experience advising on cloud computing architectures and security design challenges.
• Experience performing cyber threat modeling using industry frameworks (e.g., STRIDE, PASTA).
• Strong understanding of information security fundamentals and defense-in-depth practices.
• Ability to build relationships and influence stakeholders across multiple groups.
• Clear oral and written communication skills for diverse audiences.

Nice-to-haves

• Familiarity with medical device industry cybersecurity frameworks preferred.

Benefits

• Competitive salary
• Health insurance
• 401k plan
• Flexible working hours
• Professional development opportunities