Skip to main content

This job has expired

DHTS INFORMATION SECURITY ANALYST

Employer
Duke University
Location
Durham

View more

Administrative Jobs
Institutional & Business Affairs, Safety & Security, Technology, Analysts & Programming
Employment Type
Full Time
Institution Type
Four-Year Institution
Send job

Job Details

Auto req ID
108735BR
Duke Entity
HEALTH SYSTEM
Job Code
3843 DHTS INFORMATION SECURITY ANALYST
Job Description
Information Security Analyst Technical Lead for Security Applications

The Information Security Analyst Technical Lead for Security Applications provides support for a variety of operational and consultative functions as part of the Duke Health Information Security Office (ISO).  The Information Security Analyst helps design, implement, manage, and monitor security controls to protect the confidentiality, integrity, and availability of the organization’s information assets in accordance with legal, regulatory, and institutional requirements. The Information Security Analyst also acts as a subject matter expert in relevant domains of knowledge, and will work in collaboration with IT, clinical, research, and management staff.
 
Duties and Responsibilities
This position may include the following duties and responsibilities.
  • Develop an understanding of key Duke Health security applications (e.g. endpoint protection, detection, and response; encryption; data loss prevention; enterprise vulnerability management)
  • Plan, research and design robust security architectures for security applications
  • Test security applications and work with development teams or vendors
  • Working in conjunction with cross-functional teams, develop and manage plans to attain and maintain compliance with various regulatory requirements, including but not limited to HIPAA, FISMA, and PCI.
  • Conduct risk assessments, vulnerability scans, and penetration tests to identify security risks, and report on findings to system owners and management.
  • Using output from risk assessments and requirements analysis, assist system, application, and data owners/managers with selecting security controls and documenting system security plans.
  • Review existing security plans with system, application, and data owners/managers to ensure that controls are properly implemented, and to proactively identify any gaps that may result in non-compliance with regulatory or Duke Health requirements.
  • Use professional judgment and institutional knowledge to assess risk levels, conduct forensic investigations, provide guidance on remediation planning, and prioritize remediation efforts. 
  • Develop and deliver security awareness training for the organization’s staff.
  • Respond to relevant service requests received from end users.
  • Provide reports and presentations on the status of security controls and industry trends to management and technical staff.
  • Participate in campus-wide information security events and programs to ensure alignment and knowledge sharing between departments.
  • Participate in other activities necessary to support the information security program.
    • Education
  • Bachelor’s degree in a related clinical or technical field, or four years of equivalent technical experience required.
    • Experience
  • Minimum of five years of general IT industry experience is required, of which at least three years should have been in an information security operations, engineering, or related role.
    • Degrees, Licensure, and/or Certification
  • One or more information security industry certifications (e.g. CISSP, CEH, GIAC certifications, or equivalent) are preferred.
  • Additional technical or management certifications (e.g. MCSE, CCNP, AWS Certified Solutions Architect, Salesforce certifications, VMWare Certified Professional, CCIE, or PMP) are preferred.
    • Knowledge, Skills, and Abilities
     
  • Must have a working knowledge of at least one of the following information security practices, standards, and systems:
  • Data Loss Prevention (DLP) systems
  • AWS, Azure or Google Cloud
  • Encryption technologies and standards
  • Endpoint security software
  • Firewalls
  • Forensic investigation practices
  • Identity and Access Management (IAM)
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Network and/or application penetration testing
  • Security Information Event Management (SIEM) systems
  • Virtual Private Network (VPN) systems
  • Vulnerability management practices
  • Vulnerability scanning tools
  • Must have a working knowledge of the HIPAA Security Rule, FISMA or PCI.
  • The ideal candidate will have demonstrated the following characteristics through past professional and educational experiences:
  • Able to maintain a positive attitude in challenging circumstances
  • A broad understanding of multiple IT disciplines and technologies
  • Strong focus on customer satisfaction
  • Strong written and oral communication skills
  • Strong critical thinking, analytical, and problem solving skills
  • Able to troubleshoot problems in complex technical environments
  • Able to work independently or as part of a team as necessary
  • Able to effectively prioritize tasks with competing deadlines
  • Self-starter who is able to work with minimal direction
  • Able to work effectively across multiple technical disciplines
  • Strong interpersonal skills and the ability to build relationships with colleagues, customers, vendors, and other third parties
    •  
    Location
    Durham
    Requisition Number
    401543824
    Position Title
    DHTS INFORMATION SECURITY ANALYST
    Shift
    First/Day
    Job Family Level
    CD
    Full Time / Part Time
    FULL TIME
    Regular / Temporary
    Regular
    Department Name
    DHTS - INFORMATION SECURITY ADMIN
    Minimum Qualifications
    Duke University is an Affirmative Action/Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or veteran status.

    Duke aspires to create a community built on collaboration, innovation, creativity, and belonging. Our collective success depends on the robust exchange of ideas—an exchange that is best when the rich diversity of our perspectives, backgrounds, and experiences flourishes. To achieve this exchange, it is essential that all members of the community feel secure and welcome, that the contributions of all individuals are respected, and that all voices are heard. All members of our community have a responsibility to uphold these values.

    Essential Physical Job Functions: Certain jobs at Duke University and Duke University Health System may include essential job functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department.
    Education
    Level 3 - Bachelor's degree in a related clinical or technical field, or four years of equivalent technical experience required. 

    LICENSURE/CERTIFICATION: LEVEL 3: In addition to the requirements described for the Level 3 requires: One or more information security industry certifications (e.g. CISSP, CISM, CISA, CEH, or equivalent) are required.

    Experience
    Level 3 - Four years of related experience is required.

    Licensures, Certifications
    N/A

    Organization

    Read our Diversity Profile History

    Duke University was created in 1924 by James Buchanan Duke as a memorial to his father, Washington Duke. The Dukes, a Durham family that built a worldwide financial empire in the manufacture of tobacco products and developed electricity production in the Carolinas, long had been interested in Trinity College. Trinity traced its roots to 1838 in nearby Randolph County when local Methodist and Quaker communities opened Union Institute. The school, then named Trinity College, moved to Durham in 1892, where Benjamin Newton Duke served as a primary benefactor and link with the Duke family until his death in 1929. In December 1924, the provisions of indenture by Benjamin’s brother, James B. Duke, created the family philanthropic foundation, The Duke Endowment, which provided for the expansion of Trinity College into Duke University.Duke Campus

    As a result of the Duke gift, Trinity underwent both physical and academic expansion. The original Durham campus became known as East Campus when it was rebuilt in stately Georgian architecture. West Campus, Gothic in style and dominated by the soaring 210-foot tower of Duke Chapel, opened in 1930. East Campus served as home of the Woman's College of Duke University until 1972, when the men's and women's undergraduate colleges merged. Both men and women undergraduates now enroll in either the Trinity College of Arts & Sciences or the Pratt School of Engineering. In 1995, East Campus became the home for all first-year students.

    Duke maintains a historic affiliation with the United Methodist Church.

    Home of the Blue Devils, Duke University has about 13,000 undergraduate and graduate students and a world-class faculty helping to expand the frontiers of knowledge. The university has a strong commitment to applying knowledge in service to society, both near its North Carolina campus and around the world.

    Mission Statement

    Duke Science"James B. Duke's founding Indenture of Duke University directed the members of the University to 'provide real leadership in the educational world' by choosing individuals of 'outstanding character, ability, and vision' to serve as its officers, trustees and faculty; by carefully selecting students of 'character, determination and application;' and by pursuing those areas of teaching and scholarship that would 'most help to develop our resources, increase our wisdom, and promote human happiness.'

    “To these ends, the mission of Duke University is to provide a superior liberal education to undergraduate students, attending not only to their intellectual growth but also to their development as adults committed to high ethical standards and full participation as leaders in their communities; to prepare future members of the learned professions for lives of skilled and ethical service by providing excellent graduate and professional education; to advance the frontiers of knowledge and contribute boldly to the international community of scholarship; to promote an intellectual environment built on a commitment to free and open inquiry; to help those who suffer, cure disease, and promote health, through sophisticated medical research and thoughtful patient care; to provide wide ranging educational opportunities, on and beyond our campuses, for traditional students, active professionals and life-long learners using the power of information technologies; and to promote a deep appreciation for the range of human difference and potential, a sense of the obligations and rewards of citizenship, and a commitment to learning, freedom and truth.Duke Meeting

     “By pursuing these objectives with vision and integrity, Duke University seeks to engage the mind, elevate the spirit, and stimulate the best effort of all who are associated with the University; to contribute in diverse ways to the local community, the state, the nation and the world; and to attain and maintain a place of real leadership in all that we do.”

    Send job

    Get job alerts

    Create a job alert and receive personalized job recommendations straight to your inbox.

    Create alert