IT Security Analyst II

We are here for life's journey.
Where is your life journey taking you?

Being the heartbeat of Denver means our heart reflects something bigger than ourselves, something that connects us all:

Humanity in action, Triumph in hardship, Transformation in health.

Department

Job Summary

The IT Analyst Security II is responsible for multiple day-to-day security tasks and various information security projects as part of supporting the organization's information security needs. Day-to-day tasks include incident response, evaluation of requests for security changes, and monitoring of various security devices and audit logs. Responsibilities also involve providing ongoing support and advice to IT staff and end users on a variety of security issues, and ensuring that Denver Health's security policy and procedures are adhered to.

Essential Functions:

• In collaboration with infrastructure application teams and external department system administrators, implements and monitors organizational IT security policies and procedures, ensuring technical controls are enforced. (10%)
• Works with IT department managers and staff to ensure security issues are addressed as new equipment, facilities, systems, and software are installed. (10%)
• Develops processes for routine and requested internal audits of systems, applications, and data access including tools and techniques used to conduct audits. (5%)
• Conducts or coordinates audits on predefined schedule and when an audit is requested or indicated as part of an investigation. (5%)
• Documents audit findings and follows-up on access irregularities. (5%)
• Follows procedures and industry best practices for reporting and investigating IT related security incidents. (5%)
• Investigates and documents all reported or suspected security incidents. Maintains documentation of investigations and provides reports to the Chief Information Security Officer. (5%)
• Recommends implementation of corrective actions needed to mitigate security vulnerabilities. (5%)
• In coordination with Network/Server and Applications, develops procedures and technical controls to monitor appropriate administrator, end-user, vendor, and remote access to the Denver Health network, and IT systems. (5%)
• Investigates alerts to ensure that information is not altered or lost during storage, or transmission. (5%)
• Collaborates with the Project Management Office (PMO) on initiatives involving the IT Security program. (5%)
• Provide monthly metrics to the CISO and the IT Director of Information Security by the 3 rd business day of each month. (5%)
• Monitor and respond to help desk tickets within the documented Service Level Agreements (SLA). (5%)
• Maintain current documentation for all procedures and applications currently in use. (5%)
• Respond to all on-call notifications within required documented SLA's. (5%)
• Responsible for periodically updating management, via written or verbal reports, on all issues, concerns, or problems related to the IT Security program. (5%)
• Monitors changes to applicable laws, industry standards, and regulatory or accreditation requirements, and incorporates requirements into the organization's IT Security program. (5%)
• Plans and organizes time effectively. Integrate priority changes into work plans. Anticipates resource needs and plans accordingly. (5%)

Education:

• Bachelor's degree required or a minimum of 5 years of IT experience required.
• At least one IT Security certification (i.e. CompTIA Security+) required.

Work Experience:

• 4-6 years required.

• Familiarity with regulations and compliance issues, preferably within the healthcare industry
• Demonstrated ability to drive multiple requirements across systems, users, and workflows
• Demonstrated ability to communicate with technical and non-technical stakeholders across the organization
• Working knowledge of IT Security tools and solutions
• Demonstrated ability to recognize and respond to alerts or other behaviors to quickly detect and mitigate potential threats
• Demonstrated ability to mentor, educate, and train other team members
• Familiarity with advanced networking concepts (i.e., TCP/IP)
• Strong understanding of Microsoft Windows desktop and server operating systems
• Familiarity with Linux operating systems
• Advanced knowledge of Web Security Solutions
• Advanced knowledge E-Mail Security Solutions
• Advanced knowledge of Security Incident Event Management (SIEM) systems
• Advanced knowledge of Vulnerability Management
• Advanced knowledge of security architecture including NIST, OWASP, etc.

Shift

Work Type

Salary

Benefits

• Outstanding benefits including up to 27 paid days off per year, immediate retirement plan employer contribution up to 9.5%, and generous medical plans

• Free RTD EcoPass (public transportation)

• On-site employee fitness center and wellness classes

• Childcare discount programs & exclusive perks on large brands, travel, and more

• Tuition reimbursement & assistance

• Education & development opportunities including career pathways and coaching

• Professional clinical advancement program & shared governance

• Public Service Loan Forgiveness (PSLF) eligible employer+ free student loan coaching and assistance navigating the PSLF program

• National Health Service Corps (NHCS) and Colorado Health Service Corps (CHSC) eligible employer

Our Values

• Respect

• Belonging

• Accountability

• Transparency

All job applicants for safety-sensitive positions must pass a pre-employment drug test, once a conditional offer of employment has been made.

Denver Health is an integrated, high-quality academic health care system considered a model for the nation that includes a Level I Trauma Center, a 555-bed acute care medical center, Denver's 911 emergency medical response system, 10 family health centers, 19 school-based health centers, Rocky Mountain Poison & Drug Safety, a Public Health Institute, an HMO and The Denver Health Foundation.

As Colorado's primary, and essential, safety-net institution, Denver Health is a mission-driven organization that has provided billions in uncompensated care for the uninsured. Denver Health is viewed as an Anchor Institution for the community, focusing on hiring and purchasing locally as applicable, serving as a pillar for community needs, and caring for more than 185,000 individuals and 67,000 children a year.

Located near downtown Denver, Denver Health is just minutes away from many of the cultural and recreational activities Denver has to offer.

Denver Health is an equal opportunity employer (EOE). We value the unique ideas, talents and contributions reflective of the needs of our community.

Applicants will be considered until the position is filled.