IT Security Analyst III - Valleywise Health System

Under the direction of the Executive Director, IT Security, and CISO, this position will perform IT security analysis and assessments in accordance with established procedures and protocols. Ensures the demonstrable Confidentiality, Integrity, and Availability (CIA) of Valleywise Health information assets for authorized internal and external users by reviewing, validating, classifying, and responding to security events and cyber-attacks. The Information Technology Security Analyst III will assist with meeting the requirements of all four domains (Security Oversight, IT Risk Assessment, Security Engineering, and Security Operations) and focus in-depth on the domain requirements of Security Operations and IT Risk Assessment. This position will educate others on IT security risk remediation/mitigation and industry best business practices. Valleywise Health is committed to providing high-quality, comprehensive benefits designed to help our employees and their families stay physically and financially fit. Known for the diversity of not only the community of patients we serve but also our workforce and the benefits we offer, such as:

• Medical, Dental, and Vision Plans
• Flexible Spending Accounts
• 100% Retirement Match in the Arizona State Retirement System (ASRS)
• Paid Time Off and Paid Holidays
• Sick and Extended Illness Bank
• Tuition Reimbursement Programs
• And much more!

Annual Salary Range: $79,913.60 - $117,873.60QualificationsEducation:

• Requires a bachelor’s degree in information systems (IS) or a related field or an equivalent combination of training and progressively responsible experience that will result in the required specialized knowledge and abilities to perform the assigned work in lieu of a degree.

Experience:

• Requires at least five (5) years of progressively responsible information systems and security operations, cloud security, and security analysis experience demonstrating an understanding of the required knowledge, skills, and abilities.
• Prefer experience administering one or more of the following: SIEM solutions, IAM, EDR, PEN Testing, Phishing Campaigns, Firewall Rules, etc.

Certification/Licensure:

• Requires Global Information Assurance Certificate (GIAC) Certified Incident Handler (GCIH) certification within 18 months of starting the position.
• Requires ITIL (IT Infrastructure Library) certification within 18 months of starting the position.
• Desired to obtain a Certified Information Systems Security Certification (CISSP) certification within 24 months of starting.

Knowledge, Skills, and Abilities:

• Must be able to analyze IT security threats, understand risk, articulate operational impact, and work as part of a team dedicated to achieving and maintaining compliance with all applicable regulations.
• Requires the ability to guide senior management and peers in assessing and identifying threats and vulnerabilities.
• Must be able to perform IT security risk assessments, develop and resolve complex security-related issues, and recommend, develop, and implement compensating controls to remediate or mitigate known risks and vulnerabilities to an acceptable level.
• A functional understanding of regulatory and compliance mandates, including but not limited to HIPAA, HITECH, PCI, and NIST-CSF, is preferred.
• Must be able to create, expand, and maintain relationships with peers and stakeholders.
• Must be attentive to communication interaction, demonstrate comprehension of detailed information, and adapt to various verbal styles and modes of persuasion.
• Must possess excellent conflict resolution skills and promote a cordial and professional work environment.
• Must be reliable and have the ability to inspire performance and take bold and decisive action despite risks and uncertainty.
• Requires the ability to read, write, and speak effectively in Technical and Business English.

PI249559705