Security Business Analyst

POSITION OVERVIEW : bout the Role :

The Security Business Analyst will work collaboratively with the CISO, and department heads within the Security Office to identify, analyze and document operational processes, procedures and workflows.

In addition, the Security Business Analyst will be responsible for determining operational objectives by studying Security Office functions, gathering information; evaluating output requirements and formats.

The incumbent must be able to identify emerging information security threats, potential audit findings and potential incidents, and to work in conjunction with internal and external stakeholders on solutions and risk mitigation strategies. The individual will produce detailed documentation, including procedures, processes, and data flows to improve the security posture of the organization and will provide recommendations for security enhancements to existing operational processes and procedures.

Responsibilities :

Y ¨ Research data management best practices, including in the areas of governance, storage, privacy, and reporting.

Y ¨ Review current policies and procedures and make recommendations for policy and process changes to address gaps and risks associated with current IT Security operations.

Y ¨ Work with stakeholders, vendors, contractors and applicable third parties to ensure existing EOHHS Policy and Standards are up to date.

Y ¨ Create knowledge resources and materials related to EOHHS IT Security.

Y ¨ Develop documentation, such as, workflows, guidelines, processes, and procedures, regarding Incident Response Plan, Vulnerability Management Program and other security initiatives.

Y ¨ Develop a process for tracking open security-related problem reports and fixes.

Y ¨ Help institute clear operational protocols and advise on the deployment and / or acquisition of EOHHS IT assets, ensuring that EOHHS IT Security is well-supported with the tools and information needed to effectively implement Security functions.

Y ¨ Prepare, manage, and communicate project plans. Coordinate project activities with team participants as required.

Y ¨ Ensure project documentation, plans and scheduling are in compliance with agency initiatives and priorities.

Y ¨ Identify risks, potential scope creeps & escalating issues to Security Office management.

Y ¨ Maintain a comprehensive understanding of the evolving threats to networks, applications and cloud infrastructure.

Y ¨ djust to changing situations to meet emergencies or security incident resolution.

Y ¨ Prepare program documentation : flow charts, file layouts, input / output documentation and program narratives.

Preferred Qualifications :

Y ¨ Bachelor's degree

Y ¨ Five years relevant experience

Y ¨ Excellent process design and procedural writing skills.

Y ¨ Strong verbal communication skills.

Y ¨ Strone interpersonal and organizational skills.

Y ¨ Proficient in Microsoft Office, i.e., Access, Excel, PowerPoint, Word, and VISIO.

Y ¨ Demonstrated ability to work independently, as well as within project teams, providing relevant system analysis services.

Y ¨ Highly analytical, with the ability to independently analyze, document findings and recommend solutions.

Y ¨ Security certification plus.

Y ¨ Prior G overnment or healthcare experience plus.

Education and Certifications :

• Bachelor's Degree