Information Security Analyst - Audit and Compliance (Onsite & Remote (hybrid) working schedule required)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Silver Cross Hospital, so some details may not match this job. The employer's own page has the real description.

Overview

The Information Security Analyst - Audit and Compliance at Silver Cross Hospital plays a critical role in safeguarding the organization's information assets. This position is responsible for conducting comprehensive audits, ensuring compliance with established security policies, and implementing best practices in information security. The analyst will work collaboratively with various departments to identify vulnerabilities, recommend improvements, and monitor adherence to regulatory requirements, thereby enhancing the overall security posture of Silver Cross Hospital.

Job Responsibilities

• Conduct regular audits of information security practices and compliance with internal and external regulations.
• Identify, evaluate, and report on information security risks and deficiencies within the organization.
• Develop and implement security policies, procedures, and best practices to mitigate risks.
• Ensure that all IT systems comply with applicable laws, regulations, and organizational standards.
• Collaborate with IT and operational teams to maintain and enhance security frameworks.
• Assist in security incident response and investigations, documenting findings and outcomes.
• Prepare detailed reports on audit findings, compliance statuses, and risk assessments for management review.
• Conduct training sessions to promote an awareness of security protocols among employees.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security, audit, or compliance roles.
• Strong understanding of IT security frameworks and compliance standards (e.g., NIST, ISO 27001, HIPAA).
• Proficiency in risk assessment and management techniques.
• Experience with security auditing tools and methodologies.
• Relevant certifications such as CISSP, CISA, or CISM are preferred.
• Excellent analytical, problem-solving, and organizational skills.
• Strong communication skills, both written and verbal, to effectively convey complex security concepts.

Technologies & Tools

The Information Security Analyst will utilize a variety of technologies and tools in their daily responsibilities. This includes security information and event management (SIEM) systems, vulnerability assessment tools, intrusion detection systems (IDS), and firewall management software. Familiarity with endpoint protection solutions, data loss prevention (DLP) tools, and encryption technologies will also be essential. Additionally, the analyst will work with compliance management software to assist in audits and maintain documentation.

Ideal Candidates

Ideal candidates for the Information Security Analyst position at Silver Cross Hospital will exhibit a strong commitment to security excellence and a proactive approach to problem-solving. They should have meticulous attention to detail, along with the ability to manage multiple tasks in a dynamic environment. The ability to communicate effectively with diverse teams and stakeholders is essential, as is a strong ethical foundation. Successful candidates will demonstrate a passion for continuous learning and development in the ever-evolving field of information security.