Cybersecurity GRC Business Systems Analyst II

Banner Health is a nationally-recognized healthcare leader committed to innovation and excellent patient care. As a Cybersecurity GRC Business Systems Analyst II, you will assess cybersecurity risks, validate control effectiveness, and ensure policy compliance across healthcare technology environments, while collaborating with cross-functional teams to support secure and compliant business solutions.

Responsibilities:

• Support process enhancement and redesign efforts to streamline Cybersecurity delivery. Review and analyze the effectiveness and efficiency of existing systems and processes to develop strategies for improving or further leveraging, consolidating, or decommissioning
• Provide insight into scope and parameters of required analysis in order to define outcome criteria and deliver measurable actions as part of daily efforts as well as in projects
• Contribute to the determination of key data points from raw data and generate information to create meaningful actionable metrics and represent at an executive level
• Support research efforts to make recommendations
• Operate in compliance with all federal, state, and local mandated information security laws, rules, and guidelines. Remain current with the latest industry information
• Ability to work within procedures with minimal oversight
• Ability to communicate effectively with leaders at all levels of the organization
• Under general direction, this position is responsible for information security across multiple departments system-wide and requires interaction at all levels of staff and management

Requirements:

• Must possess strong knowledge of business, cybersecurity, information technology and/or computer science as normally obtained through the completion of a bachelor's degree
• Certification may be required in at least one of the following areas within one year of entering the position: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Systems Security Certified Practitioner (SSCP), Payment Card Industry - Internal Security Assessor (PCI-ISA), Certified in Risk and Information Systems Control (CRISC), HealthCare Information Security & Privacy Practitioner (HCISSP), CompTIA Security+ or other certification designated by the Information Security Leader
• Must possess three years of experience in a healthcare or related environment or an equivalent combination of relevant education, technical, business and healthcare experience
• Must demonstrate expertise in information technology and healthcare
• Needs experience in medium to large scale project planning and reporting either individually or in a team
• Requires communication and presentation skills to engage technical and non-technical audiences
• Requires ability to communicate and interact across facilities and at various levels
• Ability to balance project workloads with customer support and on-call demands
• Demonstrate proficiency with the Microsoft Suite of products and other tools depending on position requirements
• Advanced degree may substitute for work experience
• Additional related education and/or experience preferred