IT Network & Security Analyst II

Work Status Details: Full Time | 80.00 Hours Every Two Weeks
Exempt from Overtime: Exempt
Shift Details: Evening and weekend work will be required as needed for projects.
Department: Information Technology | Reports To: Manager-IT Infrastructure & Telecommunications

The mission of Faith Regional Health Services is to serve Christ by providing all people with exemplary medical services in an environment of love and care.

Summary:

Supports and maintains the network infrastructure and implements projects related to network security, hardware, and software. Responsible for ensuring a secure computing environment throughout the organization. Lead implementation of security services, appliances, systems, policies, and procedures for protecting information assets from threats, both external and internal. Provide advanced skills in identifying and eliminating security risks, threats, and vulnerabilities .

*** This position may be performed on-site, hybrid, or remotely with the following guidelines:

· The employee resides in Nebraska

· Successfully completes a 90 day on-site introductory period starting on Day 1

· If fully remote, may be required to come on-site up to 20%

· Adherence to all other organizational remote work requirements and policies

The listing of job duties contained in this job description is not all inclusive. Duties may be added or subtracted at any time due to the needs of the organization.

Responsibilities:

Essential Job Duties and Responsibilities :

1. Research, evaluate, architect, implement, and maintain networking technologies that ensure a secure environment. Act as a knowledge resource for existing network devices and services, i.e. firewalls, switches, load balancers, remote access/VPN, DNS, wireless, etc.

2. Responsible for maintaining and updating network equipment inventory records and network problem records. Maintains diagram of Network layout. Evaluates hardware changes that will provide enhanced or additional functionality to the Networks. Thoroughly tests all Network functions after any upgrade has been performed to ensure full user functionality the following day.

3. Provide advanced problem-solving skills, with required attention to detail, and exhibit an in-depth knowledge of industry-standard networking/security concepts and technologies. Solve problems quickly when a user or an automated monitoring system lets them know about a problem.

4. Provide primary support of network protocols: IP, TCP, Spanning Tree, OSPF, BGP, VRRP, ARP and applications interaction at the network layer (e.g. HTTP, SSL, TCP, etc.).

5. Assists with designing, implementing and maintaining a highly complex system infrastructures, as well as implementing, testing, and supporting hardware and software systems.

6. Works in conjunction with information security teams, risk management teams, and outside vendors, to proactively identify, assess, monitor, track, and report security incidents and metrics, as well as potential cyber-related risks to the organization. Maintains an awareness of current cyber trends, threats, and vulnerabilities and communicates these risks to necessary parties.

• Responsible for analyzing information contained within Information Security key platforms.
• Daily monitoring information security events by analyzing Intrusion Detections reports, various security logs and other sources.
• Monitors security bulletins and alerts from all Partners’ information system vendors.
• Document, potential security breaches and follow organizational procedures for incident response.

7. Provides day-to-day operation/maintenance to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access. Interfaces with users to understand their security needs and implements procedures to accommodate them. Ensures that users understand and adhere to necessary procedures to maintain security. Implement policies and procedures that follow industry best practices and compliance frameworks, including HIPAA, PCI, ISO, HITECH, SANS Top 20.

8. Demonstrate knowledge of network security technologies, e.g. IDS/IPS, DLP, PKI, SSL, Certificates, etc. Stay current with evolving security trends, risks, and technologies. Conduct information security research of latest security issues and keeps up to date of testing tools, techniques, and process improvements in support of security event detection and analysis.

9. Prepare, conduct, and remediate results of both internal and external audits, security/risk assessments and vulnerability scans of the enterprise environment.

10. Assist with the security evaluation of vendors and applications. Provide and/or support security awareness training within the organization.

11. Present exceptional customer service in the course of troubleshooting and other interactions with employees, physicians, and clinicians.

Hours will be dependent on patient census and workload. Ability and willingness to work a flexible schedule, to include after-hours and weekends as necessary.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Other information:

Job Requirements:

The requirements listed below must be representative of the knowledge, skills, minimum education, training, licensure, experience, and/or ability required.

EDUCATION:

Associate Degree required.

Bachelor’s Degree preferred.

CERTIFICATES, LICENSES, REGISTRATIONS:

Current, valid driver’s license issued in the state of legal residence required.

Operate FRHS owned vehicles required.

IT Certification in IT Security preferred.

Previous Experience Requirements:

EXPERIENCE:

2 years of previous experience in IT Networking or Security field preferred.

Combination of 6 years of education and experience in position field preferred.

Skills/Knowledge Requirements:

SKILLS:

Language Skills – Ability to read, write, speak, and understand the English language required.

KNOWLEDGE:

Network protocols: IP, TCP, Spanning Tree, OSPF, BGP, VRRP, ARP and applications interaction at the network layer (e.g. HTTP, SSL, TCP, etc.) required.

Industry-standard networking/security concepts and technologies required.

Industry best practices and compliance frameworks, including HIPAA, PCI, ISO, HITECH, SANS Top 20 preferred.

Network security technologies, e.g. IDS/IPS, DLP, PKI, SSL, certificates, etc. required.

Network devices and services, i.e. firewalls, switches, load balancers, remote access/VPN, DNS, wireless, etc. required.

Other Certifications/Requirements:

Your own personal smart phone required. (Faith Regional mobile apps, as well as consent to receive messages by SMS/MMS on personal phone, may be necessary to perform the functions of this position.)

Faith Regional Health Services is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.