IT - Cybersecurity Analyst III, Security Operations - Digital Technical Services

Hackensack Meridian Health - Edison, NJ

Full-time - Mid Level

Edison, NJ

Hospitals

About the position

The Cybersecurity Analyst III, Security Operations (Sec Ops) at Hackensack Meridian Health (HMH) plays a crucial role in maintaining the security and integrity of the organization's data. This position requires a deep understanding of cybersecurity threats, technologies, and countermeasures to ensure the security of computer systems across various platforms and business units. The analyst will be responsible for safeguarding information system assets and data, while also addressing cybersecurity risks. This includes researching cybersecurity controls, vulnerabilities, and developing effective strategies to mitigate risks. The role involves examining infrastructure, devices, processes, and procedures to identify security flaws and threat vectors, and implementing prompt solutions to reduce cybersecurity threats. As a mid-level technology-oriented position, the Cybersecurity Analyst III is tasked with protecting the confidentiality, integrity, and availability of information systems and data for employees, partners, and patients. The position is primarily remote, with occasional visits to the Edison, NJ office for team events or troubleshooting incidents. The analyst will oversee the planning, design, implementation, testing, and operation of cybersecurity tools and systems, while also managing relationships with management and vendors to develop new solutions that meet business requirements. Keeping abreast of emerging threats and trends in healthcare cybersecurity is essential, as is the ability to communicate effectively with senior leadership and other stakeholders.

Responsibilities

• Demonstrate an in-depth understanding of business processes and risk management in areas such as cybersecurity, cloud security, and compliance.
• Oversee planning, design, implementation, testing, and operation of cybersecurity tools, processes, and systems.
• Identify and evaluate complex business and technology risks and remediation methods to mitigate risks.
• Execute processes within all activities of the cybersecurity incident response lifecycle, including detection, triage, analysis, containment, recovery, and reporting.
• Remediate cybersecurity risks and exposures, assisting in determining the causes of cybersecurity violations.
• Keep abreast of emerging threats, patterns, and trends in healthcare cybersecurity, privacy, and compliance.
• Administer cybersecurity software or systems to prevent attacks and protect against network breaches.
• Manage relationships with management and vendors to develop and implement new solutions to meet business requirements.
• Monitor cybersecurity trends, standards, and practices to identify areas lacking appropriate cybersecurity controls and make recommendations.
• Research, evaluate, and recommend cybersecurity-related hardware and software to maintain a strong cybersecurity posture.

Requirements

• Bachelor's degree in IT, Computer Science, Management Information Systems, or equivalent degree; work experience may be substituted.
• Minimum of 7 years of general IT experience with at least 5 years in cybersecurity.
• Minimum of 5 years experience in an environment that has adopted a common security framework.
• Experience with cybersecurity tools such as IPS, SIEM, Web Secure Gateway, Email Gateway, DLP, Firewalls, Malware Protection, MDM, and Forensic Tools.
• Demonstrated experience translating technical concepts into business terminology.
• Exceptional collaboration ability and experience as an intermediate-level negotiator.
• Ability to interact effectively with organizational senior leadership.
• Excellent verbal and written communication and presentation skills.
• Proficient computer skills, including Microsoft Office and/or Google Suite platforms.

Nice-to-haves

• Proficient understanding of regulatory and compliance mandates, including HIPAA, HITECH, and PCI.
• Strong knowledge of healthcare environments.
• In-depth understanding of cybersecurity practices for networks, servers, databases, and applications.
• Broad understanding of Public Key Infrastructure (PKI), encryption, and network security controls.

Benefits

• Competitive salary and benefits package.
• Support for professional development and continuing education.
• Flexible work arrangements with remote work options.
• Opportunities for career advancement within the organization.