Cybersecurity Business Systems Analyst III HIPAA

- Mid Level

AZ

About the position

Health care is full of possibilities. Information Technology plays a pivotal role in excellent patient care at Banner Health. If you’re looking to leverage your abilities – you belong at Banner Health. Cybersecurity Governance, Risk, and Compliance (GRC) is a critical framework that helps organizations manage their operations with a clear understanding of risk while adhering to regulatory requirements. In the context of healthcare, GRC becomes even more vital when dealing with sensitive data, such as patient health information, which is governed by laws like HIPAA. Regular HIPAA assessments, which fall under the umbrella of GRC, ensure that an organization’s practices align with federal privacy and security regulations, preventing data breaches and ensuring the safety of protected health information (PHI). By performing these assessments, organizations can not only mitigate the risk of costly penalties but also build trust with clients and patients, demonstrating a commitment to privacy and security. A typical day in the life of a Cybersecurity GRC Business Systems Analyst III involves assessing the organization's existing security policies and controls, evaluating potential risks to PHI, and conducting regular HIPAA compliance audits. You’ll work closely with cross-functional teams, helping them understand how to implement best practices to meet regulatory standards and improve the security posture of the organization. It’s a dynamic, problem-solving role that combines strategic thinking with practical application—no two days are alike, and every decision you make helps fortify the organization against emerging threats. From reviewing risk assessments to guiding the implementation of corrective actions, the impact of your work is felt throughout the company, making every day both challenging and rewarding.

Responsibilities

• Manage process enhancement and redesign efforts to streamline Cybersecurity delivery.
• Review and analyze the effectiveness and efficiency of existing systems and processes to develop strategies for improving or further leveraging, consolidating, or decommissioning.
• Work independently and as a team with minimal oversight to identify and establish scope and parameters of required analysis.
• Determine key data points from raw data and generate information to create meaningful actionable metrics.
• Translate complex, technical specifications into understandable and actionable business requirements.
• Manage financial planning processes and deliver financial results and reporting including month end, total cost of ownership, ROI, and CBA.
• Conduct research to make recommendations and to support decision making.
• Provide guidance, direction, and oversight for compliance with all federal, state, and local mandated information security laws, rules, and guidelines.
• Interpret, evaluate, manage, and strategize vendor relationships.
• Interact at all levels of staff and management across multiple departments system-wide.

Requirements

• Must possess strong knowledge of business, cybersecurity, information technology and/or computer science as normally obtained through the completion of a bachelor's degree.
• Certification may be required in at least one of the following areas within one year of entering the position: CISSP, CISA, SSCP, PCI-ISA, CRISC, HCISSP, CompTIA Security+.
• Must possess four years of experience in a healthcare or related environment or an equivalent combination of relevant education, technical, business and healthcare experience.
• Must demonstrate expertise in information technology and healthcare.
• Needs experience in medium to large scale project planning and reporting either individually or in a team.
• Requires communication and presentation skills to engage technical and non-technical audiences.
• Requires ability to communicate and interact across facilities and at various levels.
• Ability to balance project workloads with customer support and on-call demands.
• Demonstrate proficiency with the Microsoft Suite of products and other tools depending on position requirements.

Nice-to-haves

• Advanced degree may substitute for work experience.
• Additional related education and/or experience preferred.

Benefits

• Comprehensive benefit package for all benefit-eligible positions.