IT Cybersecurity Sr Analyst

CommonSpirit Health - Englewood, CO

Full-time - Mid Level

Englewood, CO

10,001+ employees

Hospitals

About the position

The Cybersecurity Sr Analyst at CommonSpirit Health plays a crucial role in supporting the Cyber Data Governance program, which is responsible for safeguarding confidential and protected health information. This position involves designing and implementing policies and procedures to ensure data protection while balancing business needs. The analyst will lead efforts within the Data Loss Prevention (DLP) team, conduct investigations, monitor security risks, and collaborate with various stakeholders to enhance information security practices across the organization.

Responsibilities

• Provide advanced support to the CommonSpirit Data Loss Prevention and Data Protection program.
• Mentor junior analysts and check their work under the guidance of the System Director.
• Conduct independent investigations into inappropriate use of confidential information.
• Monitor and analyze information from multiple applications to identify security risks and compliance gaps.
• Engage with end users and business teams to provide guidance on complex information security issues.
• Create monthly reports on key risk indicators and make recommendations for improvement.
• Participate in the design and implementation of policies for monitoring confidential information.
• Collaborate with IT and Cybersecurity teams to institute mitigating controls.
• Develop and maintain user manuals and program documentation.
• Identify and prioritize remediation of information security risks and compliance gaps.
• Prepare actionable recommendations to mitigate identified risks and ensure compliance with policies.
• Conduct independent information security reviews and risk assessments for major programs.
• Evaluate current security technology against relevant regulations and standards.
• Participate in an On-Call schedule for 24x7 coverage with a one-hour response expectation.
• Provide business-focused recommendations for improvement and implement procedural changes.
• Facilitate and lead meetings for assigned projects.
• Build and maintain strong working relationships with internal stakeholders.
• Ensure data integrity and accuracy in reports and dashboards.

Requirements

• Bachelor of Science degree in computer science with an emphasis on information security or a related technical field; equivalent work experience may be considered in lieu of a degree.
• Minimum of seven (7) years of progressive experience in information services, including five (5) years in systems security.
• Minimum of four (4) years' experience in a highly regulated industry such as healthcare, finance, or federal.
• Minimum of three (3) years' experience with implementing and managing data loss prevention tools, policies, and rules.
• Experience with Skyhigh, ProofPoint, and/or Trellix is required.
• Strong verbal and written communication skills.
• Self-motivated and team-oriented.