Associate IT Security Analyst - Dhahran Al Janub, المملكة العربية السعودية - Talent Pal

وصف

JobCode

Basic Function

The Associate IT Security Analyst supports IT Department JHAH ITleads cloud environment business lines and employees withgovernance compliance and communication of JHAHs informationsecurity policies procedures and standards. The IT Security Analystfunctions as the focal point for information security complianceactivities.

Scope

Thecandidate will create manage and maintain user security awarenesstraining provides oncall support as required coadministers keyapplications assisting the IT System Engineer and providesassistance for security related incident response provides securitypositioning statements and consultation as it relates to companyand SaaS/IaaS/PaaS environment for RFPs collaborate with ITmanagement legal department safety and security and law enforcementagencies to manage security vulnerabilities and manage securitytools hardware and vulnerabilities scanning tools to ensure theymeet compliancerequirements

PrincipalContacts

JHAHIT leads Team members Supervisors and JHAH managers andadministrators

PrincipalDuties

• Monitorand assess JHAH business continuity program and disaster recoveryprogram;
• Assist with network penetration testsapplication vulnerability assessment scans and risk assessmentreviews;
• Develop policies and procedures whichenable agreed upon best security practices in theorganization;
• Coordinate and administerdocumentation for security processes and procedures for thedepartment and company;
• Maintain oversight ofthe compliance management program;
• Enforcestandards responding promptly to detect offenses developingcorrective action;
• Coordinate responses toinformation security incidents;
• Coordinate andexecute IT security projects; and
• Conductcompanywide data classification assessment and security audits andmanage remediationplans.

Additional Duties asmay be required

• Responsiblefor determining security requirements by evaluating businessstrategies and requirements; researching information securitystandards; conducting system security and vulnerability analysesand risk assessments; studying architecture/platform; identifyingintegration issues; preparing costestimates.
• Responsible for planning securitysystems by evaluating network and security technologies; developingrequirements for Applications local area networks (LANs) wide areanetworks (WANs) virtual private networks (VPNs) routers firewallsand related security and network devices; designs public keyinfrastructures (PKIs) including use of certification authorities(CAs) and digital signatures as well as hardware and software;adhering to industry standards.
• Responsible formaintaining security by monitoring and ensuring compliance tostandards policies and procedures; conducting incident responseanalyses; developing and conducting trainingprograms.
• Responsible for monitoring thesecurity environment; identifying security gaps; evaluating andimplementing enhancements
• Design of overarchingglobal security framework operating model and strategy includingrelated policies and processes
• Implement ITSecurity policies in accordance with applicable laws standards andregulations
• Communicate framework strategy andpolicies to all relevant internal and externalparties

Education

Bachelors degree in a computer/ITfield.

Experience

• Upto 5 years of experience with exposure to general systemadministration;
• Experience and knowledge insecuring technical platforms ispreferred;
• Experience and knowledge of ITsystems/data security as it relates to the cloud environment ispreferred
• Understanding of regulations and bestpractices for technical deployments in a cloud/datacenterenvironment and healthcare industry ispreferred
• Experience and knowledge in secureserver and workstation deployment andsupport.

Certifications/Otherrequirements asapplicable

• Generalunderstanding of networking andtelecommunications;
• Ability to learn quicklyand maintain a diverse workload in a fastpaced environment;and
• Proficiency with Word Excel PowerPointMicrosoft Project and Visio. Knowledge of information securitystandards (e.g. ISO 27001/27002 etc.) rules and regulations relatedto information security and data confidentiality (e.g. HIPAA HITECHHITRUST Etc.);
• Strong communication skills(written verbal and listening);
• SecurityCertifications such as Security CISSP GIAC and others aredesirable;
• Healthcare IT experience is aplus;
• Excellent troubleshooting skills SAPskills desirable; and
• This position requiressome weekend and evening assignments as well as availability duringoffhours for participation in scheduled and unscheduledactivities.