Cyber Security Analyst

Job#: 1337193

Job Description:

Apex Systems has an exciting Direct Hire opportunity with our client, Jefferson Health! We are looking for a Cybersecurity Analyst II/GRC Specialist!

The ideal candidate will have at least five years’ experience in an information security function, ability to multi-task, a keen eye for detail, strong organizational skills, the ability to thrive in fast-paced, high-stress situations, ability to communicate cyber security issues to peers and management via oral and written format. 3+ years’ solid understanding of Cyber Security & IT controls, network / systems / application penetration testing and vulnerability assessments. Experience with NIST and ISO frameworks. Solid knowledge of HIPAA, HITECH, FERPA, and other IT security governing bodies.

If you or someone you know is interested in hearing more about the role, please reach out to aalburger@apexsystems.com for immediate consideration! 

Location: Philadelphia, PA (hybrid - 2 days onsite)

Length: Permanent/Direct Hire

Rate: $105-$110k/yr

PRIMARY FUNCTION:   

The Cyber Security Analyst II – GRC (Governance, Risk and Compliance) is responsible for conducting risk assessments of enterprise-wide systems, applications, network and network connected devices to ensure compliance with the implementation and maintenance of controls mandated by Jefferson security policy and standards.  The role requires partnership with IT, business owners, and third parties towards implementing a safe and secure solution.  This position is intended to provide highly skilled compliance and information security expertise for assessing Jefferson’s compliance and risk posture related to its information assets.  It also requires the support of cyber security initiatives through predictive and reactive analysis, articulating emerging trends to leadership and staff.

ESSENTIAL FUNCTIONS:

• Performs risk assessments of Jefferson information computing assets and business processes to identify information security risks and regulatory non-compliance, and support remediation efforts
• Ensures that risk assessments are conducted promptly with required completeness and accuracy
• Provides strong customer service with third parties to cultivate relationship and ease of doing business
• Provides guidance and support to IT and business to ensure continued compliance
• Participates in projects to identify and validate critical controls to address IT and business risks and identified deficiencies
• Provides support with Issue, Exception, and Incident Management, as needed
• Participates in the creation and update of policies, procedures and standards to assure they are managed to support security, compliance and regulatory requirements
• Endorses and supports a compliance culture
• Promotes security awareness to the enterprise to reinforce workforce education on security standards, policies and best practices
• Maintains familiarity with HIPAA and other Information Security regulations

OTHER FUNCTIONS AND COMPETENCIES:

• Active team player in cyber security projects at Jefferson
• Effective interaction skills in both oral and written communication
• General concept and knowledge of Issue, Exception and Incident Management
• Supports other information security operations as required

INTERNAL/EXTERNAL CONTACTS:

Jefferson faculty, staff and students

External vendors

_________________________________________________________________________

EDUCATIONAL/TRAINING REQUIREMENTS:

Bachelor’s degree in an information technology field preferred

_________________________________________________________________________

CERTIFICATES, LICENSES, AND REGISTRATION:

At least one information security certification, such as a SSCP, CISA, CISM, CISSP, CRISC, or professional certificate is required.  ISACA certification is preferred.

Thank you,

Amanda Alburger

Technical Recruiter

Apex Systems

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at employeeservices@apexsystems.com or 844-463-6178.