Security Analyst

ECCO Select is a talent acquisition and advisory consulting company, specializing in providing people, process and technology solutions for our clients needs. Were the talent behind the technology. To find out more about ECCO Select visit our website: www.eccoselect.com

Position Title: Security Analyst

Job Description:

• Develops and maintains information security related documentation, e.g., policies, frameworks, standards, methods & procedures, executive presentations, corporate communications, and knowledge base (KB) articles.
• Provide principal assistance for compliance related duties (scheduled reviews of internal policies and procedures, internal audits and external audits) and for risk related duties (contract reviews, risk assessments of newly requested software or hardware)

• Serves as a critical resource for staff and leaders regarding information security policy implementation, interpretation, and compliance.
• Assesses and prioritizes information security and cybersecurity risk across the organization; reducing information security and cybersecurity risk by helping to prioritize and drive remediation efforts throughout the organization.
• Provide principal assistance and proactively lead coordination as Information Security Managers designated representative for governance related duties, e.g., reviews of existing documents, as well as development of newly requested documents.

• Develops and implements a data security risk reporting framework for management teams and governance committees.
• Designs and documents technical, administrative, and physical controls to ensure the business demonstrates compliance.
• Assists with the evaluation of the effectiveness of the information security program by developing, monitoring, gathering, and analyzing information security and compliance metrics for management.

• Identifies, analyzes, evaluates, and documents information security risks and controls based on established risk criteria.
• Conducts security risk assessments of planned and installed information systems to identify vulnerabilities and risks.
• Recommends controls to mitigate security risks identified via risk assessment process.
• Performs third-party supplier risk assessments to ensure supply chain risk is managed throughout the supplier's lifecycle.
• Articulates results of the final assessments to business stakeholders, project sponsors, program managers.

Minimum Qualifications:

• 5-7 years experience in a healthcare setting, addressing risk and compliance with regulatory requirements
• Associate Degree in Healthcare, Information Technology, Business, or related field (2 years of relevant experience).
• Demonstrated success performing risk assessments, writing policies to comply with governmental regulations, or implementing other key GRC functions.
• Demonstrated success leading small to medium scale projects.

ECCO Select is committed to hiring and retaining a diverse workforce. ECCO Selects policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category.

Equal Employment Opportunity is The Law

This Organization Participates in E-Verify