IT Security Analyst - Houston, TX - Empower Pharmacy

Position Summary:

Empower Pharmacy is on the forefront of transforming patient care through technology, and our dedication to ensuring the security of our IT estate is paramount. As an IT Security Analyst at Empower, you will be a critical part of our team, tasked with safeguarding our digital assets and maintaining the integrity of our information systems. You will have the opportunity to contribute to the security and resilience of our organization, directly impacting our mission and ability to deliver innovative healthcare solutions.

 

In this pivotal role, you will collaborate closely with our Security Operations Center (SOC) vendor to monitor and ensure that service level agreements (SLAs) are met, thereby maintaining vigilant protection of our IT infrastructure. Your keen analysis of our current security posture will lead to recommendations that enhance our compliance with industry frameworks and regulatory standards. You will be instrumental in monitoring and analyzing security incidents, and your proactive approach will assist in the timely escalation of security events to prevent potential threats.

 

As an IT Security Analyst, you will also play a key role in promoting a security-conscious culture within the organization. You'll facilitate security awareness training for employees, contribute to the development and improvement of information security policies, and participate in vulnerability assessments and security testing to identify and mitigate potential risks that could impact our operations.

 

This position is designed for a vigilant, proactive professional who is continually updated on the latest security trends and technologies. At Empower, you will find a collaborative environment that encourages innovation and continuous improvement in all aspects of security. Join us and contribute to a team that is dedicated to making a difference in the health and wellness of our customers through expanding access to quality, affordable medication.

Duties and Responsibilities:

• Works with our Security Operations Center (SOC) vendor to ensure monitoring SLAs are being met, and the current IT estate is being protected.
• Analyzes current security posture and makes recommendations for improvement in compliance with industry frameworks.
• Works with IT teams to ensure compliance with industry standards and regulatory requirements.
• Monitors and analyzes security incidents and assists in the escalation of security events.
• Assists in responding to service requests & incidents via ticketing system.
• Facilitates security awareness training for employees to promote a security-conscious culture within the organization.
• Contributes to the development and improvement of information security policies, procedures, and documentation.
• Conducts assessments of data handling process and responds to alerts generated from DLP systems and other tools.
• Participates in vulnerability assessments and security testing to identify weaknesses and potential risks in our systems.
• Is responsible for Firewall, IPS/IDS management, and tuning.
• Stays updated with the latest security trends, threats, and mitigation techniques.
• Performs and is responsible for any daily and recurring security operations related tasks.
• Performs other duties as assigned.

 

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.

 

While performing the responsibilities of the job, the employee is required to talk and hear. The employee is often required to remain in a stationary position for a significant amount of the work day and frequently use their hands and fingers to handle or feel in order to access, input, and retrieve information from the computer and other office productivity devices. The employee is regularly required to move about the office and around the corporate campus. The employee is regularly required to stand, walk, reach with arms and hands, climb or balance, and to stoop, kneel, crouch or crawl.

Knowledge and Skills:

• Knowledge of cloud computing security (AWS, Azure) is a plus.
• Familiarity with security frameworks such as NIST, ISO 27001, or CIS control.
• Ability to administer network and host-based tools for pen testing & ethical hacking products.
• Knowledge of host compromise & malware injection techniques.

 

Key Competencies

• Customer Focus: Ability to build strong customer relationships and deliver customer centric solutions.
• Optimizes Work Processes: Know the most effective and efficient processes to get things done, with a focus on continuous improvement.
• Collaborates: Builds partnerships and works collaboratively with others to meet shared objectives.
• Resourcefulness: Secures and deploys resources effectively and efficiently.
• Manages Complexity: Makes sense of complex, high quality, and sometimes contradictory information to effectively solve problems.
• Ensures Accountability: Holds self and other accountable to meet commitment.
• Situational Adaptability: Adapts approach and demeanor in real time to match shifting demands of different situations.
• Communicates Effectively: Develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences.

Experience and Qualifications:

• A bachelor’s degree from an accredited school is preferred, or commensurate professional experience.
• Between 7-10 years of IT security experience in a corporate environment.
• Experience managing and configuring Microsoft security tools like Azure Security Center, Microsoft Defender for Endpoint, and Microsoft Cloud App Security.
• Recent experience in data loss prevention technologies (MS Defender, MS Purview).
• Certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals or Microsoft Certified: Security Operations Analyst Associate are strongly preferred.
• Experience with multi-factor authentication, firewalls, SIEM, EDR/MDR, email security vulnerability scanning.
• Preferred industry standard certifications such as Security+ or Certified in Cybersecurity.
• Certified Information Systems Security Professional (CISSP) certification is preferred, or willingness to obtain within six months of start date.

Benefits:

• No-Cost Medication: Get your prescribed compounded medications at no cost, ensuring your health without the financial burden.
• Onsite Health & Wellness – IV Therapy Drips: Rejuvenate with complimentary onsite IV Therapy drips, enhancing your well-being and energy levels.
• Comprehensive Medical, Dental, and Vision Options: Choose from three medical plans tailored to your needs, plus options for dental and vision coverage for you and your family.
• Telehealth visits: Access board-certified Doctors anytime, anywhere for you and your family.
• Paid & Volunteer Time Off: Enjoy paid time off for personal pursuits and contribute to causes you care about with volunteer time off.
• Paid Holidays (8 scheduled; 2 floating): Celebrate with eight scheduled holidays and two floating holidays, giving you flexibility and time for personal traditions.
• Life & AD&D Coverage: Secure your and your family's financial future with life and accidental death and dismemberment (AD&D) insurance.
• FSA (Flexible Spending Account): Manage healthcare expenses smartly with pre-tax dollars in a Flexible Spending Account (FSA).
• 401K Dollar-for-Dollar Up to 4%: Invest in your future with our 401K plan, featuring a dollar-for-dollar match up to 4%.
• Company Paid Long-Term Disability: Provided at no cost, which replaces 60% of your income if you become disabled for a long period of time.
• Flexible Schedules: Balance work and life seamlessly with our flexible scheduling options.
• Rewards & Recognition Program: Your hard work doesn't go unnoticed – enjoy rewards and recognition beyond your paycheck.

 

Additional Voluntary Benefits

• Accident Insurance: Pays a lump sum benefit to help cover expenses following an accidental injury.
• Hospital Indemnity Insurance: Enhance your peace of mind with supplemental hospital insurance for unexpected stays.
• Critical Illness: Protect your finances from the expenses of a serious health issue.
• Short-Term Disability: Protect your income during illness or injury with short-term disability coverage.
• Supplemental Life & AD&D: Add an extra layer of financial protection for you and your loved ones with supplemental life and AD&D coverage.
• Legal Services: Access professional legal assistance to address concerns confidently.
• Identity Theft Protection: Safeguard your identity and finances with our identity theft protection benefit.
• Pet Insurance: Care for your furry family members with our pet insurance coverage.
• Employee Assistance Program: Confidential counseling and support services for a holistic approach to your well-being.