Location:

Rosedale Office Building

Department:

IS Administration

Shift:
First Shift (United States of America)

Standard Weekly Hours:

40

Summary:

The Information Security Risk Analyst reports directly to the Director/Lead of IT Security Risk Management, supports the implementation, operations and continuous process improvement of the Cook Children's Information Security Risk Management Program. The Program seeks to minimize the risk of accidental or intentional disclosure of data to unauthorized individuals as related to the confidentiality, integrity and availability of information technology systems and/or services. The Information Security Risk Analyst will support program activities including threat identification, vulnerability assessment, risk analysis, risk management planning, risk monitoring, and third party risk analysis to ensure that Cook Children's is compliant with respect to identifying and mitigating risk as required by federal and state regulations. The Information Security Risk Analyst will conduct risk assessments while documenting and reporting within the appropriate timeframes and tools.

• Bachelor's Degree required or higher with a total of 1 years of experience developing, implementing or managing an organization's risk management program.
• 1 or more years of healthcare experience required.
• 1 or more years of experience working with regulations including HIPAA/HITECH and PCI/DSS required.
• 1 or more years of experience identifying, assessing and managing information security vulnerabilities required.

• Security + minimum.
• Willingness to obtain professional certification such as Certified Information Security Manager (CISM), SANS GIAC Security Essentials (GSEC), Certified Information Systems Security Professional (CISSP)