Sr. Security Risk Analyst

Job Title: Sr. Security Risk Analyst

Location: RWJ - Hamilton

Department Name: IT&S Security

Req #: 0000212497

Status: Salaried

Shift: Day

Pay Range: $91,472.00 - $129,204.00 per year

Pay Transparency:

The above reflects the anticipated annual salary range for this position if hired to work in New Jersey.

The compensation offered to the candidate selected for the position will depend on several factors, including the candidate's educational background, skills and professional experience.

Overview:

The RWJBarnabas Health Senior Security Risk Analyst will primarily be responsible for evaluating and governing facility, system and third-party risk for the organization,

In addition, this individual will provide mentoring and give assistance to other analysts,

This individual will work closely with business units and vendors to assess the security posture of new or existing systems/projects, make recommendations related to security, issue requirements required for security approval and perform follow up on identified risks,

This individual will be working in an Enterprise environment consisting of multiple acute care facilities, physician practices, ambulatory locations and corporate facilities,

The ideal candidate will have worked in a healthcare setting in a security role, have a strong understanding of technical concepts, and experience in evaluating HIPAA Privacy and Security risk,

Education:

Preferred: Bachelor's degree in IT preferred - years of experience may be substituted for degree

Minimum: Technology certification or currently enrolled in BA or MA in Security

Work Experience:

Preferred: 3 years experience in Security performing Risk Assessments

Minimum: 2 years experience in Security, Networking or Field Services in a healthcare setting

Licenses and Certifications:

Preferred: CISSP/CRISC

Minimum: CompTIA Security+, Network+

Job Specific Requirements

Responsibilities

Facility Security Risk Assessments

• Identify current points of contact at the facilities for assessment issuance
• Track findings and monitor remediation of findings from HIPAA Security and other risk assessments

HIPAA Security and PCI Education

• Conduct education sessions as needed
• Assist in Phishing and/or Social Engineering campaigns

Security Risk Assessments

• Follow current Security Risk Management team process for conducting risk assessments
• Using the tools available, evaluate responses to security assessments returned by staff, vendors, business units, researchers and others
• Coordinate meetings, follow ups and return of documentation with those returning assessments
• Engage team members within the team and the IT&S department to develop security recommendations for the analyst s current assessments
• Conduct assessments on biomedical equipment using the current processes and tools
• With guidance and assistance, manage the inventory of RWJBarnabas Health's internal and external applications to be referred to for scheduled security assessments
• Mentor junior analysts to build their assessment skillset
• Perform governance operations on training, risk, and data programs

Operations

• Provide assistance and support as needed to address incidents or issues identified within the organization
• Assist Security Operations team with Service Requests and Trouble Tickets as requested by the Director
• Work with the facilities, departments and other IT resources on issues related to Security
• Provide assistance to the team as requested by Leadership

Continuing Education

• Learn new skills and concepts, update and refresh knowledge base through training, webinars and reading articles
• Continuing education in Risk topics
• Further education in Security topics

Interested in learning more about our IT&S team? Check out this video from our leadership team! https://vimeo.com/1038366426/2f1c2a76a5?ts=0&share=copy