Vulnerability Management Analyst

Primary City/State:
Phoenix, Arizona

Department Name:
IT Threat & Vulnerability Mgmt

Work Shift:
Day

Job Category:
Information Technology

Help lead health care IT into the future. Our Information Technology professionals play a key role in excellent patient care. If you like the idea of making a positive change in people's lives - apply today.

Healthcare is constantly changing, and at Banner Health, we are at the front of that change. As Banner continues to leverage technology to deliver the highest quality of possible care cybersecurity is a top priority. The Cyber Security Operations Center (CSOC) is responsible for monitoring and responding to cyber security threats targeting Banner Health and its patients. This position helps detect and secure Banner's computing environment against both insider and outsider threats.

As a Cybersecurity Vulnerability Analyst, you will help to protect our patient's safety and privacy, as well as the continuity of effective delivery of high-quality care. You will leverage multiple tools to identify weaknesses in our internal and internet-facing systems by detecting vulnerabilities, missing patches, and misconfigurations that expose Banners systems to potential exploits. You will work with system owners to drive remediation plans, communicate information to stakeholders through dashboards and reporting, and review exception requests for threat and risk.

The typical schedule for this role is Monday-Friday 8a-5p with limited schedule flexibility and on-call rotation. The primary location for this role will be remote, with occasional travel of up to 10%. An ideal candidate will have a bachelor's Degree with 2+ years of related experience. Possess a strong understanding of Windows and Linux operating systems, endpoint and server applications, and networking protocols. Can demonstrate experience leading vulnerability remediation across both on-prem and cloud technologies, preferably supporting a healthcare environment. Be able to understand, analyze, and prioritize the results of vulnerability scan data.

Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.

POSITION SUMMARY
This position formulates and defines Cybersecurity scope and objectives based on both user needs and a good understanding of applicable industry and regulatory requirements. The incumbent designs and implements complex network or application security architectures. Conducts security reviews and oversees any subsequent remediation projects generated from the review. Competent to work at the highest practical understanding of most phases of Cybersecurity analysis and design as it applies to current and future system requirements.

CORE FUNCTIONS
1. Lead Cybersecurity projects including defining project scope, required funding, and leadership prioritization and alignment.

2. Leads the of monitoring application health and computer networks to identify, assess, and remediate security issues.

3. Leads the analysis and documentation of cybersecurity technical requirements, including hardware and software components, with the objective of standardizing security throughout company's infrastructure.

4. Leads the various IT and cybersecurity teams across different domains to perform tests to detect and fix application and network vulnerabilities.

5. Leads application teams for the integration of applications into standard cybersecurity systems.

6. Leads application development which allows for communications between different layers of cybersecurity technology.

7. This position is responsible for Cybersecurity across multiple departments system-wide and requires interaction at all levels of staff and management.

Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards. Provides all customers of Banner Health with an excellent service experience by consistently demonstrating our core and leader behaviors each and every day.

MINIMUM QUALIFICATIONS

Must possess strong knowledge of business, information security and/or computer science as normally obtained through the completion of a bachelor's degree. Certification in one of the following areas within in one year of entering the position. Systems Security Certified Practitioner (SSCP), HealthCare Information Security & Privacy Practitioner (HCISSP), CompTIA Security+, HIPAA Security, Information Security Technology Fundamentals, Internet Security or ITAA Information Security Awareness.

Must possess four years of experience in a healthcare environment or an equivalent combination of relevant education, technical, business and healthcare experience. Must demonstrate general knowledge of information technology and healthcare. Needs experience in small scale project planning and reporting either individually or in a team. Requires communication and presentation skills to engage technical and non-technical audiences. Requires ability to communicate and interact across facilities and at various levels. As is typical in this industry, variable shifts and hours and carrying/responding to a pager may be required.

PREFERRED QUALIFICATIONS

Additional related education and/or experience preferred.

EOE/Female/Minority/Disability/Veterans

Our organization supports a drug-free work environment.

Privacy Policy