Information Security Risk Analyst II- Full Time- Days- Telecommute

Overview Looking to be part of something more meaningful? At HonorHealth, you’ll be part of a team, creating a multi-dimensional care experience for our patients. You’ll have opportunities to make a difference. From our Ambassador Movement to our robust training and development programs, you can select where and how you want to make an impact. HonorHealth offers a diverse benefits portfolio for our full-time and part-time team members designed to help you and your family live your best lives. Visit honorhealth.com/benefits to learn more. Join us. Let’s go beyond expectations and transform healthcare together. HonorHealth is a non-profit, local community healthcare system serving an area of 1.6 million people in the greater Phoenix area. The network encompasses six acute-care hospitals, an extensive medical group, outpatient surgery centers, a cancer care network, clinical research, medical education, a foundation, and community services with approximately 13,100 team members, 3,500 affiliated providers and nearly 700 volunteers. HonorHealth was formed by a merger between Scottsdale Healthcare and John C. Lincoln Health Network. HonorHealth’s mission is to improve the health and well-being of those we serve. As a community healthcare system, we have a unique responsibility to keep our facilities as safe as possible to protect our patients and team members. With this in mind, we require all new hires to have received the first dose of a COVID-19 vaccine before their start date and be scheduled for their second dose. New hires who choose to receive the Johnson & Johnson vaccine only need one dose to fulfill this requirement. Reasonable accommodations will be considered. Please note – this organization is a tobacco free campus. In order to be an eligible candidate you will need to test negative on a tobacco (cotinine) test during prescreening. If you test positive you will be unable to reapply for 30 days. If you test positive a second time you will ineligible to reapply for 1 year. Responsibilities Job Summary The Information Security Risk Analyst II has principal accountabilities including ensuring the appropriate levels of information technology security are utilized throughout the organization based upon HIPAA, HITECH and other regulations, specific information security management controls, and best practice processes. The Information Security Risk Analyst will work closely with the Corporate Compliance and Human Resources departments to measure and monitor compliance with HIPAA and HITECH security requirements, corporate and industry standards, and requirements assigned by Chief Information Security Officer. In addition, the Information Security Risk Analyst will be responsible for information security related policy creation and/or review activities, over-sight of internally sponsored security audits and assessments, and coordination and support of 3rd party conducted risk assessments and compliance audits. Analyzes information technology application and network requirements and develops specifications for information security profiles for access and audits. Completes Level 1 – Level 4 Risk Assessments Develops, reviews, and maintains all policies, procedures and standards for identifying, tracking, and reporting authorized and unauthorized access and/or breaches of information security, confidentiality and privacy. Maintains and enhances cyber incident response capabilities including development of training materials and coordination of both training exercises and actual incident response activities. Develops, coordinates and oversees on a routine basis internal and external vulnerability assessments. Actively tracks and works with Information Services teams to resolve all non-compliance issues identified through audits, and/or walkthroughs. Work collaboratively with Human Resources, Corporate Compliance, and Security Operations Center staff to address any confirmed information security breaches and/or abuse situations. Designs, builds, tests and utilizes Internet access and monitoring reports that highlight employee, physicians, and volunteer abuse Collaborates and performs walkthroughs with Corporate Compliance Department staff to identify existing non-compliance areas and issues. Performs other duties as assigned. Qualifications Education Associate's Degree or 2 years' work related experience in Computer Science, Information Technology or similar field from an accredited college or university Required Experience 4 years of progressive experience in Information Technology, Information Security or Risk Management. Required