+- HIStalk Sponsor Announcements (https://histalk.com/forum)
+-- Forum: Sponsor News (https://histalk.com/forum/forumdisplay.php?fid=1)
+--- Forum: Jobs (https://histalk.com/forum/forumdisplay.php?fid=4)
+--- Thread: Information Security Analyst - KONZA National Network (/showthread.php?tid=1724)
Information Security Analyst - KONZA National Network - KBrown - 04-15-2023
Information Security Analyst - KONZA National Network
Unparalleled benefits in the healthcare community
KONZA builds upon a proven model for the development of the technical infrastructure necessary to enable sharing of clinical information at the point of care while supporting transformative value-based payment models, care management, and data analytics. Patients, physicians, healthcare facilities, and other healthcare providers from across the country benefit from KONZA's delivery of unequaled actionable intelligence.
Mission
KONZA is deeply committed to connecting healthcare providers, patients, health plans, and our technology partners together to organize healthcare data into information that will drive healthcare transformation.
Work Environment
Our workforce is nearly 100% remote. We stay connected and engaged while analyzing data to transform healthcare.
Benefits
· Group health and dental insurance, KONZA contributes 85% of the premiums
· 401k Fidelity; up to 6%
· Company-paid Life insurance and Long-Term disability
· PTO
· FSA or HSA (with employer contributions) based on which plan
A day in the life of an Information Security Analyst
The KONZA Information Security Analyst plays an important role in the success of KONZA and its partners. KONZA is a fast-paced, energetic environment. This position is responsible for providing security, informational, and quality support. In addition, this position monitors and escalates system risks and executes HITRUST standards across normal operations.
Essential Functions of the Information Security Analyst
- Lead efforts to anticipate and counter security breaches to reduce the likelihood of future security alerts, incidents, and disasters.
- Monitor alerts from security systems and provide a policy-based response including reporting and evaluating the risk in a risk assessment report. Monitor HITRUST and EHNAC security requirements and help to ensure requirements are being met.
- Help upgrade, maintain, implement, and upgrade security measures, policies, and controls.
- Perform and improve audit methods based on Service Level Agreement (SLA) definitions and published audit documents.
- Perform guide-based user setup including access addition and removal identifying automation opportunities for repeating tasks where available based on role-based access control definitions.
- Provide insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
- Design and implement system, application, and user access logging solutions.
- Provide analysis and trending of network and security log data from a large number of heterogeneous devices.
- Perform log analysis for malicious events, phishing events, spoofing events, DDS attacks, SQL Injection events, and other high-risk incidents.
- Recognizes potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.
- Support internal staff in setting up hardware, installing software, and managing phone systems.
- Knowledge and experience with a broad range of information technology including, but not limited to:
- Various Operating Systems (Windows, Linux, UNIX, etc.)
- Networking protocols and services
- Active Directory
- Firewall, IDS, IPS
- Various Operating Systems (Windows, Linux, UNIX, etc.)
- Accurately document all time and activities against assigned projects, tickets, and tasks.
- Attend and have input at various team huddles, meetings, and company forums.
- Assist with the creation of updates and training programs to secure the network and train team members.
- Help keep the security systems up to date through tracked projects including backups and change control systems based on risk level and organizational priorities defined by the CISO or CEO.
- Oversee the internal and external vulnerability testing process and resulting risk analyses to perform initial risk assessments and help design, implement, and upgrade security measures, policies, and controls.
- Verify and coordinate security controls with outside vendors through tracked projects including backups and change control systems based on risk level and organizational priorities defined by the CISO or CEO.
- Create procedures for KONZA staff and train them in security awareness and best practices.
- Execute procedures defined by application owners based on defined policies and parameters in given systems through tracked projects including backups and change control systems based on risk level and organizational priorities defined by the CISO or CEO.
- Design and coordinate system implementations for internal staff.
- Walk the staff through the problem-solving process as needs arise.
- Provide accurate information on IT systems and services.
- Pass on any feedback or suggestions to the appropriate internal team leader.
- Manage and monitor internal hardware and software assets to ensure accurate inventory records.
- Support lead staff in using the KONZA Configuration Management Program and KONZA Change Management Program.
Title Qualifications: (Knowledge, Skill, and Ability)
· Bachelor’s degree or related work experience in Computer Science or relevant field · 1-5 years’ experience in the field, such as security administration
· 2 years+ experience working in Healthcare IT or related field
· Advanced training certifications, preferred
· Active Directory and Azure maintenance experience and experience with Exchange 2007 & 2010
· Understanding of Microsoft Azure and Intune/Endpoint Manager
· Client PC connectivity - ethernet, TCP/IP, and VPN
· Familiarity with Kanban workflows and standup meetings
· Strong customer service and troubleshooting skills
· Ability to communicate technical information, both verbal and written to a wide range of end-users
· Good understanding of computer systems, mobile devices, and other software products
· Ability to diagnose and resolve technical issues
· Proficiency in English
· Excellent communication skills
· Customer-oriented and cool-tempered
· Office 365 support experience
· Familiarity with ticketing systems
· Ability to respond to Help Desk requests after hours on a limited basis
· Demonstrated effort with problem-solving skills for new problems with a good faith effort with available resources
Base Salary Range
$70k-$90k