POSITION SUMMARY: The Information Security Analyst is responsible for supporting the organization's cybersecurity operations by monitoring, investigating, and responding to security events, threats, and incidents across enterprise systems and cloud environments. This role helps safeguard organizational data and technology assets through proactive threat detection, incident response, data loss prevention monitoring, and continuous improvement of security controls and processes. The Information Security Analyst collaborates closely with additional IT teams, cross-functional partners, business stakeholders, and third-party partners to strengthen the organization's security posture, ensure regulatory compliance, and minimize operational risk while supporting a secure and resilient technology environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES: (The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation)

Monitors, investigates, and responds to cybersecurity events and alerts generated by security monitoring platforms, endpoint protection solutions, cloud security technologies, and email security systems, as well as incidents escalated by third-party security service providers, in accordance with established procedures and service level expectations.
Monitors and investigates data loss prevention (DLP) and insider risk alerts. Collaborates with IT and business stakeholders to resolve data protection incidents while minimizing business disruption.
Manages and responds to security-related service requests through the enterprise service management platform and ensures timely handling and escalation.
Supports the continuous improvement of detection and monitoring capabilities through alert tuning and optimization of security controls to reduce false positives and improve detection efficacy.
Identifies opportunities to improve security operations through process improvements, workflow enhancements, and automation to increase operational efficiency and response effectiveness.
Researches threat intelligence and cybersecurity events relevant to USAP.
Demonstrates a commitment to continuous learning by staying current on cybersecurity threats, emerging technologies, industry best practices, and regulatory requirements.
Performs other duties and responsibilities as assigned.

Bachelor’s degree in information systems, computer science, healthcare administration, or related field (or equivalent experience).
5-7 years of experience as a business systems analyst, system analyst, QA analyst, or application support specialist.
Minimum of 2+ years of experience in security operations, incident response, or related technical role.
Information security certifications (Security+, CISSP, CEH, CHFI, CISA, GIAC, or related certifications) preferred.
Understanding of cybersecurity frameworks and standards such as CIS Controls, NIST SP 800-61, HIPAA, HITRUST, or other applicable regulatory requirements is preferred.
Working knowledge of Microsoft 365 and Azure environments, including data protection technologies, endpoint management, cloud security, and identity and access management.
Flexibility to participate in after-hour support and on-call rotations as needed.
Experience with system and network administration preferred.
Strong documentation and technical writing skills.
Strong analytical and problem-solving skills.
Self-motivated with the ability to work independently and meet deadlines while maintaining a high level of accuracy.
Strong interpersonal skills and proven ability to collaborate effectively with technical teams, business stakeholders, and external partners.
Excellent written and verbal communication skills.

Occasional Standing
Occasional Walking
Frequent Sitting
Frequent hand, finger movement
Use office equipment (in office or remote)
Communicate verbally and in writing