Cyber Security Analyst
About the Role
Gertrude’s Children’s hospital is in search of a highly skilled Cyber Security Analyst to join our team. The Cyber Security Analyst role is critical to ensuring the confidentiality, integrity, and availability of sensitive patient data and healthcare systems. This role requires strong expertise in cybersecurity frameworks, threat detection, incident response, and compliance with healthcare-specific regulations. The Cyber Security Analyst will collaborate with stakeholders to ensure secure, resilient, and compliant systems that protect patient data and support high-quality care delivery.
Responsibilities
- Develop and implement security policies, protocols and solutions to protect against cyber threats and data breaches.
- Collaborate with stakeholders at Gertrude's to assess risks and vulnerabilities and devise proactive security measures.
- Monitor security tools, SIEM dashboards, and logs to identify and investigate suspicious activity.
- Lead and support cybersecurity incident response activities, including documentation, containment, eradication, and recovery.
- Collaborate with stakeholders to ensure least privilege and proper Identity and Access Management (IAM) lifecycle management.
- Assist in delivering cybersecurity training to all staff to promote a culture of security mindfulness across the organization.
- Provide security architecture and hardening expertise during system design, procurement, and implementation.
- Support the ICT team in conducting regular vulnerability assessments while ensuring adherence to best practices and contributing to the development of security KPIs.
- Prepare operational and management-level security reports.
- Keep up with emerging security trends, technologies, and best practices to continually enhance the organization's security posture.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, or related fields.
- At least 2 years’ experience as a Cyber Security Analyst.
- At least one security certification from the list:
- CEH: Certified Ethical Hacker; CISA: Certified Information Systems Auditor; CISM: Certified Information Security Manager; CISSP: Certified Information Systems Security Professional; SSCP: Systems Security Certified Practitioner; CompTIA Security+; OSCP: Offensive Security Certified Professional.
