Information Security Risk Analyst II

Overview

If you are looking to make an impact on a meaningful scale, come join us as we embrace the Power of One!

We strive to be an employer of choice and establish a reputation for being a talent rich organization where Associates can grow their career caring for others. For over a century, we've served the health care needs of the people of Memphis and the Mid-South.

Responsible for examining and analyzing the information system operations to identify opportunities for risk reduction. Ensure the appropriate level of information security is utilized based on industry standards, best practices, HIPAA, HITECH, and other regulations by developing repeatable processes to identify, evaluate, and measure IT security risk. Evaluate risk and perform due diligence and periodic security reviews on IT vendors. Partner with other stakeholders to develop and maintain disaster recovery procedures and periodically test those procedures for effectiveness. Help develop and maintain security policies. Partner with Audit, Compliance, and Legal to manage security risk and compliance. Asset in the development, maintenance, and presentation of security awareness training and testing. Models appropriate behavior as exemplified in MLH Mission, Vision and Values.

Working at MLH means carrying the mission forward of caring for our community and impacting the lives of patients in every way through compassion, a deliberate focus on service expectations and a consistent thriving for excellence.

A Brief Overview

Responsible for examining and analyzing the information system operations to identify opportunities for risk reduction. Ensure the appropriate level of information security is utilized based on industry standards, best practices, HIPAA, HITECH, and other regulations by developing repeatable processes to identify, evaluate, and measure IT security risk. Evaluate risk and perform due diligence and periodic security reviews on IT vendors. Partner with other stakeholders to develop and maintain disaster recovery procedures and periodically test those procedures for effectiveness. Help develop and maintain security policies. Partner with Audit, Compliance, and Legal to manage security risk and compliance. Asset in the development, maintenance, and presentation of security awareness training and testing. Models appropriate behavior as exemplified in MLH Mission, Vision and Values.

What you will do

• Ensure the appropriate level of information security is utilized based on industry standards, best practices, HIPAA, HITECH, and other regulations by developing repeatable processes to identify, evaluate, and measure IT security risk.
• Develops and reviews security policies, procedures, and standards.
• Perform IT security risk assessments of both new and existing in-house and vendor-based systems. Recommend, design, and construct risk / security metrics, policies and standards.
• Manage the remediation of audit and security review findings and recommendations.

Education / Formal Training Requirements

Work Experience Requirements

Licenses and Certifications Requirements

Credentialed in one or more of the following :

Knowledge, Skills and Abilities

Supervision Provided by this Position

Physical Demands

Our Associates are passionate about what they do, the service they provide and the patients they serve. We value family, team and a Power of One culture that requires commitment to the highest standards of care and unity.

Boasting one of the South's largest medical centers, Memphis blends a friendly community, a thriving and growing downtown, and a low cost of living. We see each day as a new opportunity to make a difference in the lives of the people in our community.

J-18808-Ljbffr