Security Risk Analyst Lead, Fulltime, Remote, NJ at RWJBarnabas Health – West Orange, New Jersey

Job Overview:

The RWJBarnabas Health Senior Security Risk Analyst will primarily be responsible for evaluating and governing facility, system and third-party risk for the organization. In addition, this individual will provide mentoring and give assistance to other analysts. This individual will work closely with business units and vendors to assess the security posture of new or existing systems/projects, make recommendations related to security, issue requirements required for security approval and perform follow up on identified risks. This individual will be working in an Enterprise environment consisting of multiple acute care facilities, physician practices, ambulatory locations and corporate facilities. The ideal candidate will have worked in a healthcare setting in a security role, have a strong understanding of technical concepts, and experience in evaluating HIPAA Privacy and Security risk.

Qualifications:

Required:

• Technology certification or currently enrolled in BA or MA in Security
• 2 years experience in Security, Networking or Field Services in a healthcare settin

Preferred:

• Bachelor's degree in IT preferred (years of experience may be substituted for degree)
• 3 years experience in Security performing Risk Assessment

Certifications and Licenses Required:

• CompTIA Security+, Network+ required
• CISSP/CRISC preferred

Essential Functions:

• Facility Security Risk Assessments

o Identify current points of contact at the facilities for assessment issuance.

o Track findings and monitor remediation of findings from HIPAA Security and other risk assessments.

• HIPAA Security & PCI Education

o Conduct education sessions as needed.

o Assist in Phishing and/or Social Engineering campaigns.

• Security Risk Assessments

o Follow current Security Risk Management team process for conducting risk assessments.

o Using the tools available, evaluate responses to security assessments returned by staff, vendors, business units, researchers and others.

o Coordinate meetings, follow ups and return of documentation with those returning assessments.

o Engage team members within the team and the IT&S department to develop security recommendations for the analyst’s current assessments.

o Conduct assessments on biomedical equipment using the current processes and tools.

o With guidance and assistance, manage the inventory of RWJBarnabas Health's internal and external applications to be referred to for scheduled security assessments.

o Mentor junior analysts to build their assessment skillset.

o Perform governance operations on training, risk, and data programs.

• Operations

o Provide assistance and support as needed to address incidents or issues identified within the organization.

o Assist Security Operations team with Service Requests and Trouble Tickets as requested by the Director.

o Work with the facilities, departments and other IT resources on issues related to Security.

o Provide assistance to the team as requested by Leadership.

• Continuing Education

o Learn new skills and concepts, update and refresh knowledge base through training, webinars and reading articles.

o Continuing education in Risk topics

o Further education in Security topics

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.