Security Compliance Analyst

🔥 3 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rochester Regional Health

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

⚕️ Healthcare Insurance

📚 Education

Healthcare • Healthcare Insurance • Education

Rochester Regional Health is an integrated health services organization serving the people of Western New York. It operates multiple hospitals and healthcare facilities, providing a wide range of healthcare services, including emergency care, primary care, specialty clinics, and urgent care. The organization is committed to medical education and research, offering training programs, residencies, and clinical trials. Rochester Regional Health focuses on comprehensive care with emphasis on treating patients respectfully and meeting their diverse medical needs across all stages of life.

📋 Description

• Oversee rollout of cybersecurity awareness campaigns and required annual training and policy attestations. • Monitor the participation of the cybersecurity awareness campaigns, ensure compliance, and support content preparation aligned with company and regulatory requirements. • Conduct in-person staff training and promote security awareness to educate employees on security protocols to reduce human error. • Monitor user training completions and work with user's manager to assure completion in a timely manner. • Maintain data classification and data retention documentation. • Manage and communicate processes for data labeling. • Act on findings related to data mishandling as determined by DLP systems, with direct user interaction. • Work closely with business units and individuals to help them navigate the complexities of applying ISMS requirements. • Liaison with end users and department leads to implement risk remediations and security controls. • Assure the appropriate use of data in relation to data security. • Assure data masking is in use where practicable. • Assure that device, application, and data inventories remain updated. • Collects, documents, and files evidence that various security processes are functioning as intended.

🎯 Requirements

• Minimum of 1 year experience in information security or a related field. • Strong critical thinking skills. • Basic computer skills. • Strong written and verbal communication skills. • Strong ability to drive task and organizing/maintaining records. • Ability to think creatively and strategically. • Passion for learning new and emerging technology. • Technology education or certifications, experience with enterprise IT environments, experience working with security regulatory requirements, and knowledge of security frameworks such as NIST CFS, NIST 800-53, ISO, PCI-DSS a plus

🏖️ Benefits

• Health insurance • Paid time off • Professional development opportunities