Enloe Medical Center Chico , CA 95927
Posted 2 weeks ago
Pay Range: $46.90/hr - $55.11/hr - $63.31/hr# *Please note, the highest starting rate as a new hire is $55.11/hr, based on applicable experience POSITION SUMMARY: Under the direct supervision of the Information Security Manager, the Senior Information Security Analyst assists the Organization with understanding, applying, and implementing information security and privacy standards. #This position is responsible for maintaining the confidentiality, integrity, and availability of organizational information systems, as well as the integration of information security best practices with other business efforts to comply with the California Data Protection regulations and the HIPAA Security Rule and HITECH Act. # Provides analytical support and documentation related to the latest changes to HealthCare IT regulations and mandates, along with their impacts to existing systems and potential new projects. #The Senior Information Security Analyst is responsible for implementing controls in the areas of governance, risk management, program development, program management, and incident and response management.
Ensures the confidentiality, integrity and availability of all data transmitted or stored by information technology. Leads projects that implement appropriate information security technical controls such as audit logging, vulnerability scanning, authentication, and encryption. #Develops and implements enterprise wide information security education and awareness. Responsible for improving the Organization#s Information Security Program. #Researches information security technologies, develops requirements, and evaluates and recommends solutions.
EDUCATION / TRAINING / EXPERIENCE: Minimum:
Bachelor#s degree in Management Information Systems, Computer Science, or related field.
Eight years of working technical experience in an enterprise environment.# * Six years of experience working in an Information Security role.
Experience related to security technologies such as encryption, firewalls, end-point protection, and vulnerability scanning.
Experience with HIPAA compliance programs, policies, procedures, and risk assessments or information security audits.
Experience managing complex information technology projects.
Comprehensive understanding of the regulatory environment including HIPAA/HITECH, PCI; and information security frameworks i.e. NIST, ITIL, FIPS, FISMA, ISO, and Cobit.# * Knowledge of design, implementation, and maintenance of: security incident and event management (SIEM), firewalls, Active Directory, group policy, vulnerability scanning, encryption, IDS/IPS, web filtering, LDAP, multi-factor authentication, data loss prevention, anti-virus, email filtering, exploits and hacker techniques, cybersecurity threat hunting, and network and operating system security principles.# LICENSES / CERTIFICATIONS: Minimum:
Security Certification such as CISSP or GAIC (dept tracks)
Enloe Medical Center