Information Technology Security Analyst

SoTalent is hiring an IT Security Analyst II to support enterprise cybersecurity operations, compliance, risk management, and protection of sensitive information in a hospital and healthcare environment. The role monitors security events, manages vulnerabilities and incidents, supports audits and regulatory programs, administers security infrastructure, and collaborates with technical and business stakeholders to maintain secure and resilient systems.

Responsibilities:

• Monitor enterprise systems and security platforms for suspicious activity
• Identify, investigate, document, and respond to security incidents
• Analyze security logs and alerts to determine potential threats
• Support incident response and remediation activities
• Ensure security controls are functioning as intended
• Configure, maintain, and support security technologies including:
• SIEM Platforms
• Endpoint Detection & Response (EDR)
• Firewalls
• VPN Solutions
• IDS/IPS Platforms
• Proxy Servers
• Remote Access Solutions
• DMZ Infrastructure
• Assist with deployment and maintenance of new security controls
• Support ongoing security architecture initiatives
• Participate in vulnerability scanning programs
• Analyze scan results and prioritize remediation efforts
• Coordinate corrective actions with infrastructure and application teams
• Verify security weaknesses have been successfully addressed
• Assist in reducing organizational risk exposure
• Implement controls to protect sensitive information
• Monitor and regulate access to critical systems and data
• Support Data Loss Prevention (DLP) initiatives
• Maintain information security safeguards
• Ensure least-privilege and access control practices are followed
• Conduct risk assessments on applications, systems, and infrastructure
• Evaluate security controls and identify gaps
• Recommend improvements to strengthen security posture
• Participate in security reviews and technical assessments
• Support enterprise risk management initiatives
• Conduct internal audits to evaluate compliance with policies and controls
• Review operational effectiveness of security procedures
• Track audit findings, remediation activities, and corrective action plans
• Maintain audit documentation and reporting records
• Support continuous audit readiness initiatives
• Support third-party assessments and compliance reviews
• Assist with customer security questionnaires and assessments
• Participate in certification and accreditation processes
• Coordinate audit activities with internal stakeholders
• Support audit evidence collection and remediation activities
• Support vendor security assessments and due diligence activities
• Participate in pre-engagement and annual vendor reviews
• Maintain vendor risk management documentation
• Evaluate vendor security controls and compliance posture
• Assist with contract-related security reviews
• Monitor regulatory changes impacting organizational security programs
• Support compliance with healthcare and security regulations
• Assess policies, procedures, and controls against current standards
• Recommend enhancements to improve compliance and security maturity
• Coordinate activities supporting regulatory readiness
• Support development and maintenance of security policies
• Assist with security awareness and training initiatives
• Create security documentation, standards, and procedures
• Promote security best practices across the organization
• Improve organizational cybersecurity awareness
• Support development and maintenance of:
• Business Impact Analysis (BIA)
• Business Continuity Plans (BCP)
• Disaster Recovery Plans (DR)
• Risk Assessments (RA)
• Security Policies & Procedures
• Risk Evaluation
• Continuity Planning
• Disaster Recovery Support
• Documentation Management
• Program Maintenance

Requirements:

• • 1-3 years of experience in:
• • Information Technology
• • Information Security
• • Systems Administration
• • Technical Support
• • Security Operations
• • Experience participating in security assessments and audits
• • Experience working with security technologies and frameworks
• • SIEM
• • EDR
• • Security Monitoring
• • Incident Response
• • Log Analysis
• • Windows Administration
• • Linux Administration
• • Virtualization Platforms
• • LAN/WAN Networking
• • Firewall Administration
• • Data Loss Prevention (DLP)
• • Access Controls
• • Data Privacy
• • IDS/IPS
• • VPN Technologies
• • DMZ Architecture
• • Proxy Services
• • Remote Access Security
• • HIPAA
• • HITRUST
• • SOC Audits
• • COBIT
• • NIST
• • HITECH
• • Audit Management
• • Regulatory Compliance
• • Control Assessments
• • Risk Management
• • Security Governance
• • Risk Assessment
• • Problem Solving
• • Analytical Thinking
• • Project Management
• • Communication Skills
• • Presentation Skills
• • Attention to Detail
• • Documentation Management
• • Stakeholder Collaboration
• • Continuous Improvement
• • Bachelor's Degree in:
• • Management Information Systems (MIS)
• • Computer Information Systems (CIS)
• • Cybersecurity
• • Related Technical Discipline
• Equivalent experience may be considered