Information Security Analyst

Revecore helps hospitals recover earned revenue through specialized expertise and proprietary technology. The Information Security Analyst will maintain the security and integrity of company data by analyzing security measures, mitigating risk, implementing security controls, conducting audits, and managing security projects and incidents.

Responsibilities:

• Ensure that Revecore assets and electronic data are adequately protected
• Work closely with Compliance Officer, Privacy Officer, Security Officer and CIO to understand Revecore security and privacy goals
• Proactively develop, obtain approval, and implement information security projects that further protect Revecore’s sensitive information
• Perform information security audits as assigned and document results
• Ensure all audits are performed per the schedule, review results and escalate issues / exceptions as needed
• Fulfill any IT security/risk training initiatives to employees throughout the organization
• Provide assistance with information security questionnaires (received from our clients) and send to Compliance Committee for final review
• Participate on client calls on information security topics
• Investigate, assess, document and remediate any type of security breach or cyber security incident
• Work with Systems Administrators to uncover undiscovered internal/external vulnerabilities
• Fix discovered vulnerabilities to maintain high security standard
• Expand and enforce company-wide best practices for IT security
• Research security enhancements and make recommendations to management team
• Implement and maintain robust SEIM architecture
• Keep up to date with IT trends and security standards
• Serve as project manager/lead within IT security projects
• Work closely with Systems Administration team to complete department projects, goals and objectives

Requirements:

• Bachelor's degree in computer science, cyber security or a related discipline
• Microsoft 365 Security (Microsoft identity and access management (IAM), Microsoft threat protection, Microsoft Information Protection (MIP), Microsoft 365 security and risk management, etc.)
• IDS/IPS systems, SIEM tools and network scanners
• Access control methodologies (RBAC)
• Identity and access management
• Penetration testing of applications and infrastructure
• Social engineering
• Vulnerability and risk assessment
• Security assessments of network infrastructure, virtual infrastructure and applications
• Information Forensics
• Troubleshooting
• DLP, AV and anti-malware
• TCP/IP, computer networking, routing and switching
• Cloud computing
• Windows, UNIX and Linux operating systems
• Excellent report writing and communication
• The ability to work well independently or with a team
• Capable of meeting deadlines and budgets
• Must reside in the United States within one of the states listed below: Alabama, Arkansas, Delaware, Florida, Georgia, Illinois, Iowa, Indiana, Kansas, Kentucky, Louisiana, Massachusetts, Maine, Michigan, Minnesota, Missouri, Mississippi, North Carolina, Nebraska, New Hampshire, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota (CST Time Zone), Tennessee, Texas (CST Time Zone), Vermont, Virginia, Wisconsin, and West Virginia
• Industry certifications a plus (CISSP), (CISM), (CISA) (GIAC) Certified in Risk and Information Systems Control, Certified Ethical Hacker