Information Security Analyst, Assessment

Ardent Health Services is a leading provider of healthcare in communities across the country. Through its subsidiaries, Ardent owns and operates nearly 200 sites of care and 30 hospitals across six states. Together, our 24,000 employees and 1,200 employed providers touch more than 10,000 lives each day. With six Ardent entities earning recognition on Modern Healthcare's Best Places to Work list in 2022, Ardent and its facilities continue to earn recognition for outstanding workplace cultures where team members feel a sense of belonging and have opportunities to grow their careers. Ardent has also been recognized by Comparably's Best Places to Work Awards, earning honors in the Best CEO, Best Company for Women, Best Leadership Teams and Best Work Life Balance categories among others.

POSITION SUMMARY

The goal of an Information Security Analyst, Assessment is to identify, schedule, administer and perform assigned technical Information Security analyses functions, ensuring all applicable Information security requirements are met. This role will assist other members of the Ardent Information Security Operations team and key corporate/partner/business units in support of the AHS Company Mission and strategic business initiatives.

• Assessing security configurations on personal computers, mid-range systems, enterprise networks and applications.
• Works with other business units, partners and customers to maintain secure methods of data management.
• Assist in designing secure internal trust domains, web access zones, B2B, B2C, third-party connections and remote access technology.
• Perform third party risk assessments and work with Security, Infrastructure and Network architects to design a secure solution.
• Perform periodic assessments of current vendors / partners. Assist in process development.
• Assist in designing security breach drills.
• Remaining up to date with the latest security systems, standards, authentication protocols, and products.
• Competent designer of mixed-technology solutions.
• Routinely and proactively test information systems to perform risk or threat assessment, analysis and provide secure recommendations.
• Works with other business units, partners and customers to maintain secure methods of data management.
• Active participation in purple team activities, periodic reviews of current system security measures and recommend enhancements.

Education and Experience:

• Associates degree or equivalent technical training/experience.
• Reputable security certifications (Security +, GSEC, CAP, OWASP, HCISSP or CISA) preferred
• Advanced certifications (CISSP, CISSP w/specialization, SSCP, GIAC, CISM) preferred
• Experienced in assessing and/or administering intrusion detection/prevention.
• ITIL familiarization or experience - managing incidents, requests, and changes.

Knowledge, Skills and Abilities:

• A strong working knowledge of current IT risks, security implementations, computer operating environments and software programs.
• Working knowledge of general computing concepts (OSI reference model, multi-tiered application architecture, operating systems, etc.).
• Understanding of the technical components of a network infrastructure/architecture and their interactions (routing, switching, WLAN, LDAP, etc.).
• General knowledge of related third-party software products (firewalls, intrusion detection systems, filtering routers, VPNs, security scanners).
• Broad working knowledge of IT platforms, identity federation, networking, application, database, infrastructure and/or server administration such as:
  • Cloud Infrastructure (SaaS, PaaS, IaaS, DaaS)
  • Network authentication services
  • Static and dynamic routing protocols
  • LAN and WAN packet analyzers
  • DNS, DHCP, WINS and HSRP
  • Ethernet and virtual local area networks
  • Secure virtual private networking
  • Common networking protocols and services and their relevant security issues (TCP/IP, DNS, SNMP, SMTP, etc.)
• Must have good communication skills: both oral and written.
• Must display the ability to be a team player and work cohesively with Ardent employees throughout all organizational levels.
• Must be willing to travel occasionally.
• Must be resourceful, creative, innovative, results driven, and adaptable.
• Solid problem solving and analytical skills.