Information Security Analyst II

Southwest Transplant Alliance - Dallas, TX

Full-time - Mid Level

Dallas, TX

Ambulatory Health Care Services

About the position

The Information Security Analyst II plays a critical role in safeguarding the organization's information systems and data. This position is responsible for designing and administering security measures, conducting risk assessments, ensuring compliance with regulations, and developing security policies. The analyst will also lead security awareness training and collaborate with IT teams to enhance the security architecture. This role requires a proactive approach to incident response and a strong understanding of cybersecurity threats and technologies.

Responsibilities

• Design and administer SIEM rules and Endpoint Detection and Response (EDR) behaviors to support 24/7 security operations.
• Monitor and create SIEM alerts based on cybersecurity incidents and threat intelligence analysis.
• Participate in incident response and forensic activities, deploying EDR controls as needed.
• Perform penetration testing and install security measures to protect systems and information infrastructure.
• Conduct risk assessments on new technologies, upgrades, and infrastructure changes; provide design recommendations.
• Conduct regular internal and external audits of STA systems and processes, including managing contracted vendor audits.
• Ensure compliance with relevant laws and regulations (e.g., HIPAA, GDPR).
• Develop, review, and maintain information security policies, standards, and guidelines.
• Analyze cybersecurity incidents detected from various platforms and operating systems to resolve issues.
• Lead and present new and existing information security awareness programs to all STA staff.
• Collaborate with IT team to design and implement secure network and system architectures.
• Develop and maintain detailed incident response plans.
• Implement Data Loss Prevention (DLP) strategies to protect sensitive information.
• Evaluate the security posture of third-party vendors and partners.
• Generate reports on key security metrics for leadership.

Requirements

• High School Diploma (Required)
• Bachelor's Degree in Information Security, Computer Science, or related field (Preferred)
• 5+ years of Information Security, Governance, Risk and Compliance, Information Technology, or Business Analysis experience.
• 5+ years of experience developing, communicating, and presenting Information Security and Risk Management concepts.
• 5+ years of experience with technologies such as IPS, firewalls, endpoint protection, DLP, SEIM, and virtualization platforms.
• Experience with virus/malware protection solutions.
• Subject matter expert in SIEM, forensics, malware analysis, and incident handling.
• Understanding of network protocols (TCP, UDP, DNS, FTP, SMTP, DHCP, etc.).
• Familiarity with industry regulations (e.g., HIPAA, HITECH).
• Excellent communication skills.

Nice-to-haves

• Direct experience in a healthcare setting is strongly preferred.

Benefits

• Hybrid work environment
• Full-time position
• Opportunity for professional development and training