[Hiring] Cybersecurity Analyst @OSIS

Role Description

We are seeking an experienced Cybersecurity Analyst to help protect our organization and the healthcare organizations we support from evolving security risks. In this fully remote position, you will help plan, implement, monitor, and enhance security controls designed to safeguard computer systems, networks, and sensitive information.

This role combines hands-on cybersecurity work with security risk management and healthcare compliance. You will conduct risk assessments, identify and address vulnerabilities, support security audits, implement security controls, and provide guidance and technical assistance to participating health centers (PHCs). You will also help ensure security practices align with applicable industry standards and federal healthcare regulations.

What You'll Do

• Perform security risk assessments, audits, and testing to identify vulnerabilities and areas of concern.
• Develop and implement safeguards to protect sensitive and confidential information from unauthorized access, modification, disclosure, or destruction.
• Monitor security threats and vulnerabilities and coordinate necessary application and system updates.
• Implement and support security tools and controls, including data encryption, application patching, and device management.
• Research and deploy CIS security benchmarks.
• Review security incidents and procedural violations and provide education to help prevent recurrence.
• Monitor and restrict access to sensitive and high-security information.
• Partner with users and stakeholders to evaluate workflows, identify security risks, and recommend improvements.
• Promote cybersecurity awareness and provide security-related training.
• Serve as a Security Risk Assessment resource for PHCs, providing training and technical assistance.
• Assist PHCs with mitigation plans for areas of concern identified through security risk assessments.
• Participate in state, local, and national collaborations supporting community health centers (CHCs), including peer collaboration groups.

Qualifications

• Bachelor's degree in Computer Science, Programming, or a related field required. An MBA in Information Systems is preferred.
• At least three years of computer systems experience, preferably with a specialization in information security.
• Relevant cybersecurity, compliance, or risk-management certifications such as CISSP, CISA, HCISPP, CHC, CHPC, CHSP, CISM, CRP, or CRISC are preferred.
• Strong technical knowledge with the ability to evaluate security threats, vulnerabilities, and controls.
• Excellent problem-solving, communication, customer service, and collaboration skills.
• Ability to work effectively in a remote environment while managing multiple priorities.

Preferred Experience

• Implementing technical security controls within a healthcare environment.
• Developing and implementing Security Risk Management programs.
• Translating cybersecurity regulations and frameworks into practical risk-assessment processes and tools.
• Developing and evaluating technical and process-based security controls.
• Managing security risk assessments and investigations.
• Working with frameworks, regulations, and certifications such as HIPAA, HITECH, PCI, SOX, SOC 1 & 2, ISO, and Meaningful Use/Promoting Interoperability.
• Working directly within the healthcare industry.

Work Environment

This is a fully remote position with limited travel of less than 10%. The role is primarily computer-based and requires prolonged periods of sitting and working at a computer. Occasional evening or weekend work may be necessary based on business needs or project demands.

Compensation Range

$75,000 - $115,000