Security Analyst

Medical Guardian is seeking a highly energized Security Analyst (Hybrid role) who will be responsible for monitoring and assessing systems for vulnerabilities, working with teams for incident response, ensuring security policy, process and procedural documentation are up to date, and preparing and managing security training and testing.

This role will engage with relevant business units to set up meetings with stakeholders to maintain compliance standards. This is a role for a well-organized individual with strong written and verbal communication skills who enjoys working in several different capacities.

Responsibilities:

• Ensure all company security policies and procedures, including incident response and disaster recover, are documented and up to date with PCI and HIPAA compliance standards.
• Engage with business units that are affected by the security policy and inform staff of the company's security guidelines.
• Set up training seminars at dictated cadences in order to ensure all employees are aware of company policies and any relevant changes.
• Assist the company trainer in creating a robust security training platform.
• Responsible for having all documentation prepared in anticipation of quarterly and annual audits.

• Organize and facilitate risk management meetings on schedule cadence and as relevant topics arise.
• Conduct internal and external security audits.
• Conduct vulnerability testing and risk analysis.
• Document all relevant incidents that affect business operations and provide postmortem and monthly reports to business.
• Act as key contact for questions or concerns regarding company initiatives around security compliance and business processes.

• Ensure all external vendors provide pertinent documentation necessary for the company to remain compliant and that all documentation is up to date.
• Develop company-wide best practices for IT security.
• Analyzing security incidents & breaches to identify the root cause.
• Verifying the security of third-party vendors and collaborating with them to meet security requirements.
• Perform additional responsibilities as they arise.

• Bachelor's Degree or equivalent work experience required.
• 3+ years of relevant security experience.
• 2-3 years of business analyst/business process re-engineering experience (preferred)

• Information Security Certification (preferred)
• Network and System Administration Experience (preferred)
• Strong business process documentation skills
• Strong communication skills
• High proficiency in Microsoft suite tools including Defender, Intune, and Entra ID

• Experience with utilizing network scanning tools (Tenable, Nessus, etc.)
• Ability to work in a fast-paced environment with changing business needs.
• Ability to communicate professionally to vendors and external resources
• Strong ability to work on multiple projects/initiatives at the same time