Address
Form of workThe Information Security Analyst II will provide service and operational support to all Maxim Information
Security Office service offerings and capabilities. The Information Security Analyst II will support project
work upon request along with reviewing security events, incidents, and conduct additional analytics to
determine if events require additional incident response actions by Maxim. The information Security
Analyst II will also support all efforts associated with Governance, Risk and Compliance (GRC) including
compliance audits, process reviews and requests for information gathering regarding the Company’s IT
Security posture, documentation repository, and all IT Security initiatives.
Essential Duties and Responsibilities:
- Works all operational activities assigned to the Security queue in the ITSM tool
- Conducts cyber intelligence analysis, coordination, and interaction across networks and infrastructure components
- Conducts incident response actions for security incidents as directed by the SOC Leader
- Identifies and reports on policy, standard, risk, certification and compliance-related metrics to demonstrate value to Maxim Healthcare
- Conducts reviews of SOC security event activities to identify trends for potential efficiency and potential gaps with services
- Provides feedback on security control capability gaps based off of security intrusion trends
- Correlates threat data from various sources. Conducts research and evaluate threat intelligence to develop in-depth analysis and assessment on threats to critical networks and infrastructure components
- Develops and maintains analytical procedures to improve security incident identification efficiency
- Develops strong working relationships with counterparts within IS
- Fulfills requests for information and associated work to represent the Company security posture and audit responses
- Interacts on a daily basis with proposals staff, contracts staff, business development leaders, and third parties in support of business development efforts
- Fulfills requests to produce and maintain the IT Security documentation
- Fulfills requests to update the IT Security question/answer documentation repository
- Participates in audits of systems and processes requested by customers and regulatory groups
- Performs work associated with the Information Security risk register
- Maintains familiarity with security requirements of relevant U.S. federal laws such as the Health
- Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) act; health care industry security standards such as Health Information TRUST (HITRUST); commercial security standards such as the Payment Card
- Industry Data Security Standard (PCI DSS); and other relevant security standards such as those defined in the ISO/IEC 27000 series
- Maintains work schedules that align with deliverables
- Performs other duties as assigned/necessary
Minimum Requirements:
- Bachelor's Degree in Systems/IT Security-related field from an accredited college or university required, equivalent experience will be considered in lieu of degree
- Between three (3) and five (5) years of related experience in IT Security or related areas, applying basic skills across a broad platform of problems with various degrees of complexity
- One or more of the following certifications: Associate of (ISC)2, CompTIA Security+, HITRUST Certified Common Security Framework Practitioner (CCSFP)
- Experience performing Security Incident Response work independently
- Performs routine work independently and conferring with Sr. level staff and management on complex or non-routine issues
- Ability to translate and implement security controls associated with HIPAA / HITECH
- Highly self-motivated and directed
- Ability to work well independently and in a team setting
- Must be organized, timely, and customer service oriented
- Strong verbal and written communication skills
- Adaptability, flexibility and ability to deal with ambiguity and change
- Must be detail-oriented
- Strong analytical and moderately complex problem-solving skills, exercising sound judgement
- Ability to effectively elicit/provide information to and from appropriate individuals (including, but not limited to, supervisors, co-workers, clients) via strong communication skills; proficiency in the English language may be required
- Proficiency in Microsoft Office suite (Word, Excel, PowerPoint, Visio and Project)
- Must be at least eighteen (18) years of age
Benefits
At Maxim Healthcare Services, we firmly believe that our employees are the heartbeat of our organization and we are happy to offer the following benefits:
- Competitive pay & weekly paychecks
- Health, dental, vision, and life insurance
- 401(k) savings plan
- Awards and recognition programs
About Maxim Healthcare Services
Maxim Healthcare Services has been making a difference in the lives of our patients, caregivers, employees and communities for more than 30 years. We offer private duty nursing, skilled nursing, physical rehabilitation, companion care, respite care and behavioral care for individuals with chronic and acute illnesses and disabilities. Our commitment to quality customer service, compassionate patient care, and filling critical healthcare needs makes us a trusted partner wherever care is needed.
Maxim Healthcare Services is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.
