Security Analyst (CA resident or willing to relocate)

About the role

IOA is a healthcare organization focused on helping aging adults and adults with disabilities stay independent in their communities, with over 23 programs. It is hiring a Security Analyst who must live in California or be willing to relocate. The analyst assesses information risk and helps remediate identified vulnerabilities for IT security and risk across the agency.

Key responsibilities

• Assess information risk and facilitate remediation of vulnerabilities in the network, systems and applications, including within the Vendor Management Program
• Perform vulnerability assessments using IT security tools and methodologies, and assess the security posture of data systems, networks and web applications
• Document risk reduction opportunities and remediation options, and monitor remediation progress
• Report findings and make recommendations for corrective action, and provide regular status reports on outstanding issues
• Maintain oversight of IT and vendors on the security of their systems and applications
• Assist in IT audits, risk assessments and regulatory compliance matters, and answer audit questions
• Provide guidance on IT security policies, procedures and standards meeting HIPAA, SOC2, HITRUST and PCIC requirements
• Create and deliver IT security and risk training, and lead IT security projects and architecture risk assessments
• Support incident management and response, and perform assessments covering DLP, advanced threat detection, IAM, endpoint security and forensic analysis

Required profile

• Associate's degree or higher in Information Systems, Computer Science, Information Security or a related field
• 4+ years of IT security or information security experience
• 2+ years of IT compliance assessment experience (HIPAA, HITRUST, PCI, etc.)
• 2+ years administering IT security controls
• Demonstrated knowledge of technical infrastructure, networks, databases and systems in relation to IT security and risk

Required skills

• IPS/IDS and SIEM technology experience
• Windows workstation and server administration
• Producing and reviewing security reports, findings and metrics
• Excellent MS Office skills and communication skills

Compensation range: $130,000 to $134,000 per year, depending on experience and education.