Security Analyst Associate, GRC

Northwestern Medicine is a healthcare organization whose Information Services team supports innovative technology and cybersecurity solutions across the organization. The Security Analyst Associate, GRC helps investigate security alerts, assess risks and vulnerabilities, improve incident response processes, and maintain security controls and documentation.

What you'll do:

• Help in alerts investigation generated by security controls. Implement provided recommendations to improve detection capability accuracy
• Participate in the optimization of incident response standards and procedure to increase the organization’s cyber resiliency
• Analyze the enterprise information security environment and identify potential gaps in the security measures to safeguard valuable information assets
• Help identify, evaluate, and report on information security risks
• Collaborate with vendors and internal departments to make recommendations to optimize performance of security controls
• Collaborate with network and technology support teams to enhance and improve security processes and documentation
• Participate in the evaluation and assessment of information security vulnerabilities, solutions, and organizational posture
• Stays current with security technologies and threats to contextualize the events observed in the environment
• Assist in providing initial assessment of impact severity for IT security incidents and executing the appropriate response
• Investigates any fraud and other computer issues
• Perform daily operational tasks required for the department to protect NM’s assets. Tasks range from (but are not limited to):
• Analyze security alerts

What they're looking for:

• 0-2 Years of Experience
• Working knowledge of the following subjects: + Network (protocols, topologies, TCP/IP) + Security controls (proxies, IPS, IDS, Firewall, and packet analyzers) + Systems (Windows, Linux/UNIX) + Software development (development / scripting languages) + Incident Response + Threat and Vulnerability Management
• Working knowledge of Security Standards/Controls specified under various IT governance and * compliance models (NIST, HIPAA, PCI, ISO 27001&27002, ITIL)
• Excellent problem-solving skills
• Demonstrated timely task completion involving solid organizational skills, task tracking, follow-up, and productive peer interaction
• Excellent verbal and written communication skills
• Bachelor's degree preferred or equivalent combination of education and experience
• Certification or courses: Security+, GSEC, GCWN, GCED or CEH a plus

Benefits:

• Tuition reimbursement
• Loan forgiveness
• 401(k) matching
• Lifecycle benefits
• Hybrid work arrangement