IT Cybersecurity Analyst

CommonSpirit Health was formed by the alignment of Catholic Health Initiatives (CHI) and Dignity Health. With more than 700 care sites across the U.S. from clinics and hospitals to home-based care and virtual care services CommonSpirit is accessible to nearly one out of every four U.S. residents. Our world needs compassion like never before. Our communities need caring and our families need protection. With our combined resources CommonSpirit is committed to building healthy communities advocating for those who are poor and vulnerable and innovating how and where healing can happen both inside our hospitals and out in the community.

CommonSpirit Health is seeking a highly motivated Cybersecurity Analyst to join other Analysts and Engineers in the pursuit of actionable cyber risk throughout the organization. 

As an Analyst within the Cybersecurity Risk Treatment team, you will be empowered to participate in and facilitate cybersecurity risk hunting operations and remediation efforts in support of key organization initiatives and strategy. You will help facilitate active governance processes to ensure that treatment of identified cybersecurity risk is implemented as planned.

The Integrated Risk Management program within cybersecurity is grounded in the proactive detection of cyber risk. Once a cyber risk to the organization has been identified, collaborative development of action plans and timelines ensure that key stakeholders are involved and can act quickly to protect the organization. You will collaborate with leaders throughout the organization. You will foster relationships with key business partners, internal technology and cybersecurity teams, and external vendors to leverage technology to enable detection of cyber risk. You will remain knowledgeable about security issues, vulnerabilities, regulatory, legal, and security policies and standards that may impact information security.

The Cybersecurity Analyst, Cyber Risk Treatment position will report to the Cybersecurity Manager, Cyber Risk Treatment, within the Governance, Risk and Compliance Department.

• Provides assistance and support of medium complexity as requested to Cyber Risk Treatment and/or other Cybersecurity and IT teams
• Participates in Discovery, Intake, Quality Assurance of Data, Triage, and Governance activities within the space of the Integrated Risk Management program
• Manages workload, prioritizing tasks and documenting time, and other duties as directed by management, as well as assisting other team members
• Assists in Continual Service Improvement efforts by identifying opportunities for process improvement
• Assists in Root Cause Analysis activities as it pertains to cyber risk findings
• Pursuit of continuing education to grow and maintain knowledge of best practices, compliance requirements, threats, and trends in information security, translating into operational action items, policies, procedures, standards and guidelines
• Acts as a security advocate for adherence to CommonSpirit Health policies and industry best practices
• Participates in the collection and documentation of departmental knowledge artifacts, participate in the population of knowledge management and collaboration systems for the Cybersecurity department
• Communicates technical information and acts as a mentor for other team members

The job summary and responsibilities listed above are designed to indicate the general nature of the work performed within this job. They are not designed to contain or be interpreted as a comprehensive inventory of all job responsibilities required of employees assigned to this job. Employees may be required to perform other duties as assigned.

• Bachelors Preferred
• 1 or more relevant technical/professional security certifications preferred (such as: COMP-TIA Network+, Security+, SANS GIAC, CISSP, CRISC, CISA, or vendor-specific)
• 2-3 years job related experience required
• 3-4 years job related experience preferred
• Demonstrated ability to effectively communicate and present complex technical information to a broad audience and make recommendations with justification to leadership.
• Proven investigative and problem solving, critical thinking, root-cause analysis, and business risk analysis skills.