Information Security Risk Analyst I

Overview

Job Description Summary

Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.

Job Description

Essential Functions

• Participates in the development and maintenance of information security policies, standards, and procedures.
• Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.
• Participates in risk analysis of identified issues to determine recommended risk treatment.
• Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.
• Coordinates business and information services resources for project and operational support.
• Stays up-to-date and informed of information security industry changes and trends.

Education Requirement

BS in Computer Science or equivalent experience required.

Continues to stay actively involved in outside education advancement.

Licensure Requirement

(not specified)

Certifications

Security+, CISSP or equivalent preferred.

Skills

Strong problem-solving ability.

Exceptional presentation skills.

Exceptional interpersonal, written, and verbal communication skills.

Demonstrated project management skills.

Proficient in Microsoft Office.

Experience

Twoyears of experience in IT; experience in healthcare, preferred.

Physical Requirements

OCCASIONALLY

Climb stairs/ladder, Lifting / Carrying

0-10 lbs, Lifting / Carrying

11-20 lbs, Standing, Walking

FREQUENTLY

(none specified)

CONTINUOUSLY

Audible speech, Computer skills, Decision Making, Flexing/extending of neck,

Hand use

grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing – Far/near, Sitting

Additional Physical Requirements performed but not listed above

(not specified)

"The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet"