Cybersecurity Analyst

PHI Health provides emergency air medical transportation services across the United States. The Cybersecurity Analyst supports the enterprise cybersecurity governance program by managing policies, risk assessments, compliance activities, third-party reviews, security awareness, metrics, documentation, and operational cybersecurity initiatives.

What you'll do:

• Coordinate and maintain the enterprise cybersecurity governance program
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines
• Coordinate periodic policy reviews to ensure documentation remains current and aligned with regulatory and business requirements
• Maintain the enterprise cybersecurity risk register and track mitigation activities through completion
• Perform cybersecurity reviews for new technologies, software solutions, AI tools, and business initiatives using established risk assessment processes
• Coordinate third-party security assessments and vendor cybersecurity reviews
• Assist with HIPAA Security Rule, NIST Cybersecurity Framework, and other regulatory or contractual compliance activities
• Coordinate cybersecurity evidence collection for internal audits, external audits, cyber insurance renewals, and customer security questionnaires
• Administer the enterprise cybersecurity awareness program, including KnowBe4 campaigns, phishing simulations, and user education initiatives
• Track cybersecurity metrics and key performance indicators and prepare executive dashboards and management reports
• Coordinate Cybersecurity Council meetings, document action items, and track completion of assigned tasks
• Maintain cybersecurity documentation, including inventories, exception registers, standards, and supporting records

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience
• Experience creating documentation, reports, or technical procedures
• Microsoft Defender Security Suite
• Microsoft Entra ID / Azure Active Directory
• Strong written communication skills
• Excellent organizational and documentation abilities
• Ability to manage multiple projects simultaneously
• Strong analytical and critical thinking skills
• Comfortable working with technical and non-technical stakeholders
• Strong attention to detail
• Excellent presentation and communication skills
• Ability to learn new technologies quickly