Healthcare Information Security Analyst I - FT -Day Shift

$73,798 - $100,922/Yr

Erie County Medical Center - Buffalo, NY

Full-time - Entry Level

Buffalo, NY

Hospitals

About the position

The Healthcare Information Security Analyst I is responsible for ensuring the security of computer systems and networks within the Health Information Systems Department at Erie County Medical Center Corporation (ECMCC). This role involves planning and executing security measures to protect against cyber threats, monitoring systems for vulnerabilities, and conducting risk assessments. The position requires collaboration with the Healthcare Information Security Manager and focuses on maintaining compliance with security policies and procedures.

Responsibilities

• Monitors enterprise compliance with information technology security policies and procedures for hospital systems and infrastructure.
• Deploys information technology security controls and processes for hospital systems and infrastructure.
• Monitors information technology systems, network and processes for security events.
• Assists with risk assessments to identify vulnerabilities or security exposures.
• Monitors information technology logs and reports.
• Documents and monitors security controls, reports and processes.
• Performs account access review audits to ensure proper functioning of data processing activities and security measures.
• Coordinates and documents application access compliance across critical applications portfolio.
• Safeguards system security and improves overall server and network efficiencies by training staff and promoting security awareness.
• Reviews violations of security procedures and provides training to ensure violations do not occur.
• Assists with security documentation and technical drawing updates.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity or closely related field and six months experience in information security; or an Associate's Degree in the same fields and two years of experience in systems software, systems analysis or application programming, with six months in information security.
• Thorough knowledge of ECMCC policies and procedures for operation and support of secure data networks, systems and applications.
• Ability to train others in tech-related topics.
• Working knowledge of information security concepts, protocols and practices.
• Ability to perform information technology risk assessments and respond to security incidents.

Nice-to-haves

• Working knowledge of information technology security management tools and products.
• Ability to communicate effectively, both orally and in writing.
• Ability to establish and maintain effective working relationships with a diverse constituency.