It Security Compliance Analyst

IT Security Compliance Analyst
Under direction from the System Director, IT Audit and Enterprise Risk Management, this role helps coordinate the third-party security risk assessment function, the IT Risk Management Steering Committee and Data Oversight Committee, participates in the information systems activity auditing program, and the annual information security risk assessment and helps to maintain the information system risk register. Must be able to weigh business needs against security concerns and articulate issues to management.
Position Highlights:

• Position: IT Security Compliance Analyst
• Location: Warrenville, IL
• Full Time/Part Time: Full Time
• Hours: Monday-Friday, during normal business hours
• Required Travel: travel to other Endeavor Health locations may be required

What you will do:

• Conduct and participate in the third-party security assessment functions.
  
  • Interfacing with the user community, the third-party assessment vendor and legal to make sure the assessments are completed based upon a complete understanding of the relationship with the third party.
  • Coordinating with the IT Security team to obtain required documentation of the relationship.
  • Writing conclusions with recommendations for what security measures need to be implemented to secure EEH data and network resources.
  • Providing guidance to staff as needed.
  • Prioritizing work and escalating issues and delays.
• Conduct IT audits/testing in accordance with IT Audit Plan.
• Participate in the annual information security risk assessment.
• Coordinate and conduct IT audit monitoring activity, over the various hospital systems, to ensure adequate controls are in place.
• Help prepare, present, and coordinate the Date Oversite Workgroup and Data Oversight Committee.
  
  • Developing the agenda with input from Compliance, Legal, IT Security and other stakeholders.
  • Taking the minutes at each meeting.
  • Making sure the Committee follows up on the action items from each meeting.
  • Putting together the materials for each Committee meeting

What you will need:

• Education: Bachelor's Degree in Information Technology or a related field (or close to graduation
• Certification: Any information technology security recognized certification (SANS, ISACA, ISC2, IIA), preferred
• Experience:
  
  • Experience in IT Operations and/or related controls within the health care industry
  • Internal Audit experience
  • Experience with Active Directory and Websense
  • Experience with software and security architectures
  • Knowledge of Workday controls, especially access and segregation of duties
• Unique or Preferred Skills:
  
  • Knowledge of HIPPA
  • Proven communication, customer service, and organizational skills
  • Knowledge of internal auditing or project management
  • Knowledge and/or appreciation for NIST
  • Ability to interact and communicate with upper management in regard to IT risks, controls, and recommendations
  • Ability to write clear and concise audit reports
  • Understanding of process flows. Knowledge of Visio is a plus
  • Understanding of IT control standards and related certification reports (PCI DSS, SOC2, HITRUST, ISO27001)

Benefits:

• Career Pathways to Promote Professional Growth and Development
• Various Medical, Dental, Pet and Vision options
• Tuition Reimbursement
• Free Parking
• Wellness Program Savings Plan
• Health Savings Account Options
• Retirement Options with Company Match
• Paid Time Off and Holiday Pay
• Community Involvement Opportunities

Endeavor Health is a fully integrated healthcare delivery system committed to providing access to quality, vibrant, community-connected care, serving an area of more than 4.2 million residents across six northeast Illinois counties. Our more than 25,000 team members and more than 6,000 physicians aim to deliver transformative patient experiences and expert care close to home across more than 300 ambulatory locations and eight acute care hospitals - Edward (Naperville), Elmhurst, Evanston, Glenbrook (Glenview), Highland Park, Northwest Community (Arlington Heights) Skokie and Swedish (Chicago) - all recognized as Magnet hospitals for nursing excellence. For more information, visit www.endeavorhealth.org.
When you work for Endeavor Health, you will be part of an organization that encourages its employees to achieve career goals and maximize their professional potential.
Please explore our website (www.endeavorhealth.org) to better understand how Endeavor Health delivers on its mission to "help everyone in our communities be their best".
Endeavor Health is committed to working with and providing reasonable accommodation to individuals with disabilities. Please refer to the main career page for more information.
Diversity, equity and inclusion is at the core of who we are; being there for our patients and each other with compassion, respect and empathy. We believe that our strength resides in our differences and in connecting our best to provide community-connected healthcare for all.
EOE: Race/Color/Sex/Sexual Orientation/ Gender Identity/Religion/National Origin/Disability/Vets, VEVRRA Federal Contractor.