What are the responsibilities and job description for the Information Security Analyst II position at Children's National Medical Center?
Your North Star: Work with the CISO leadership team to continually improve the efficiency and efficacy of the information security program.
As the Information Security Analyst II, reporting directly to the CISO, you will play a pivotal role in driving strategic initiatives, measuring and reporting on program effectiveness, managing the budget, and ensuring seamless coordination across the CISO leadership team. This position is integral to the success of the organization's information security program and requires a blend of strategic thinking, a breadth of cybersecurity knowledge, exceptional organizational skills, and financial acumen.
Minimum Education
- Bachelor's Degree Bachelor's degree in a computer science, math, engineering, or another relevant discipline or equivalent training and work experience (Required)
Minimum Work Experience
- 3 years of experience in cybersecurity with a focus on vulnerability management, cybersecurity operations, analysis, forensics and/or investigations (Required)
Required Skills/Knowledge
- Some demonstrated ability to apply key cybersecurity practices, controls, and frameworks
- Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills; and the ability to communicate information risk-related concepts to technical as well as nontechnical audiences
- Understanding and some application of practices associated with cybersecurity auditing, compliance, and policy
- Understanding of and some application of key practices associated with risk assessment, vulnerability management, penetration testing, and threat identification.
- Understanding and some application of controls and practices associated with access management, active directory, privileged account management, and authentication
- Understanding and some application of key practices associated with incident response, risk remediation, business continuity, disaster recovery, and cyber operations.
Functional Accountabilities
Cyber Analysis
- Responsible for tasks involved in the identification, documentation, and reporting of cyber risks
- Execute tasking for development and documentation of cybersecurity policies, standards, and procedures.
- Engage directly with other CNH business units to ensure security of assets, applications, and data
- Responsible for the documentation of procedures associated with managing access to CNH systems, data, and other assets
- Engages in tasks associated with cybersecurity incidents, as required
Organizational Accountabilities
- Anticipate and responds to customer needs; follows up until needs are met
Teamwork/Communication
- Demonstrate collaborative and respectful behavior
- Partner with all team members to achieve goals
- Receptive to others' ideas and opinions
Performance Improvement/Problem-solving
- Contribute to a positive work environment
- Demonstrate flexibility and willingness to change
- Identify opportunities to improve clinical and administrative processes
- Make appropriate decisions, using sound judgment
Cost Management/Financial Responsibility
- Use resources efficiently
- Search for less costly ways of doing things
Safety
- Speak up when team members appear to exhibit unsafe behavior or performance
- Continuously validate and verify information needed for decision making or documentation
- Stop in the face of uncertainty and takes time to resolve the situation
- Demonstrate accurate, clear and timely verbal and written communication
- Actively promote safety for patients, families, visitors and co-workers
- Attend carefully to important details - practicing Stop, Think, Act and Review in order to self-check behavior and performance
