Senior Cyber Security Analyst

Position Overview

The Senior Cyber Security Analyst position at Community First Health Plans Inc. (Community First) demands a deep understanding of information security protocols and a passion for protecting healthcare data. In this role, you will be instrumental in establishing and maintaining security standards, developing and managing security solutions, and effectively communicating complex security concepts to both technical and non-technical audiences. You will champion awareness, influence compliance with security policies, and provide tailored solutions for business-specific security issues while overseeing day-to-day identity access management, quarterly audits, and disaster recovery plans. You will also coordinate business continuity plans with the compliance and risk management team and serve as a thought leader and subject matter expert on federal and state information security regulations.

Key Responsibilities

• Establishing and maintaining security standards
• Developing, implementing, and managing security solutions
• Communicating complex security concepts to both technical and non-technical audiences
• Championing awareness and influencing compliance with security policies
• Providing solutions for business-specific security issues
• Overseeing day-to-day identity access management and quarterly required audits
• Owning and overseeing disaster recovery plans
• Coordinating business continuity plans with the compliance and risk management team
• Serving as a thought leader and enterprise SME for federal and state information security regulations and standards

Required Qualifications

• Bachelor's degree plus five years of progressive experience in information technology, security, or risk management.
• Must possess one or more certifications: CISSP, CASP+, CRISC, or CISA.
• Functional understanding of federal/state regulations and compliance mandates including HIPAA, HITRUST, SOC, etc.
• MITRE ATT&CK experience in building threat detections, performing threat hunting, or conducting incident response.
• Familiarity with enterprise logging technologies such as Splunk.
• Experience in Business Continuity Plan and Disaster Recovery planning and testing.
• Five years minimum experience with technologies such as Network Security (IDS/IPS, NGFW, NGAV), Operating Systems (Windows, Linux, macOS), and Security tools (EDR/XDR, SIEMs, DLP, Vulnerability Scanning and Assessment tools).

Preferred Qualifications

• Healthcare experience is highly desirable.