IT Security Analyst
Posted 3
views
Summary
IT Security Analyst at a healthcare-sector organization: monitors vulnerability assessment data, supports penetration testing and social engineering exercises, tracks emerging cyber threats, and reviews application security scan results. Requires 3+ years in IT/IS/compliance and familiarity with frameworks like SOC, ISO 27001, PCI DSS, HITRUST, and HIPAA.
IT Security Analyst needs 3+ years of experience in IT or IS or Compliance, health sector
IT Security Analyst requires:
- SOC 1-2, ISO 27001/2, PCI DSS, HITRUST, SANS, NIST
- IT degree
- Strong Project management
- Familiarity and understanding of broad range of IT hardware and software products
- Demonstrated experience in implementing compliance frameworks for financial services organization or organizations with similar information security needs and requirements
- Certified Information Systems Security Profession (CISSP), PCI DSS, Certified HIPAA Privacy Security Expert (CHPSE), Certified Information Security manager (CISM), Global Information Assurance Certification (GIAC), or related.
- Experience or knowledge with healthcare or health insurance
- Knowledge of CMS and HIPAA related vendor requirements
- Working knowledge of Security SDLC tools
IT Security Analyst duties:
- Monitor and analyze vulnerability assessment data to identify and communicate technical risks to the organization
- Support the identification and impact classification for new vulnerabilities identified in the environment Execute and support vulnerability assessments, penetration testing and social engineering activities
- Provide the Information Security and IT Security team information on the emerging cyber threat landscape, including threat actor tactics, techniques, and procedures
- Review and interpret application security scan results with an understanding of underlying code structures to provide effective feedback