Cybersecurity Risk Assessor Senior

Job Description:

The Intermountain Cybersecurity Program is broken into four distinct functions:
Governance Risk and Compliance, Cyber Solutions, Cyber Advisory and the Cyber Fusion Center. Cyber Caregivers within Intermountain will specialize in their specific area and function.

The Cybersecurity-Senior is responsible for designing, engineering, analyzing and/or assessing key elements of Intermountain’s cybersecurity program. Caregivers within this job code will support one of the following aspects of the cyber program: governance, risk and compliance activities, identity and access management, data, endpoint and application security, infrastructure and network security, cyber architecture and standards, reporting and analytics, project management and business liaising.

Senior-level professionals are experienced in all aspects of cybersecurity and/or IT systems. Typically designs and develops approaches that are implemented by others. Functions independently with minimal oversight and direction. May instruct and guide lower level technical professionals.

This role manages Intermountain Cybersecurity Risks by assessing and coordinating systemic cyber risks with key partners, suppliers, and third parties. The position requires strong communication and negotiation skills with non-technical staff in clinical and business settings, along with technical expertise to evaluate threats, recommend safeguards, allocate resources, and oversee implementation of safeguards. Responsibilities include conducting technical assessments of cloud software, medical devices, and hardware to ensure appropriate design and effective security measures.

Please note that a video interview through Microsoft Teams will be required as well as potential onsite interviews and meetings.

We are committed to offering flexible work options where approved and stated in the job posting. However, we are currently not considering candidates who reside or plan to reside in the following states:
California, Connecticut, Hawaii, Illinois, New York, Rhode Island, Vermont, and Washington.

Experienced in cyber specific functions that could entail any one of the following:

• Technical configuration, engineering, management and monitoring
• Risk analysis, corrective action planning, policy development
• Cyber threat modeling and assessment
• Policy, procedure and guidance development
• Architectural design, standards and documentation
• Server administration and scripting
• Data compiling, analytics and reporting
• Cloud operations, cloud security and Dev Sec Ops
• Automation principles and how they can be applied in IT environments

Serves as experienced resource on incident and task management work for the delivery of cybersecurity services. Serves as a subject matter expert and primary member for project delivery tasks. Experienced in Cybersecurity industry practices. Experienced in high level IT principles and processes, such as networking, service management, ITIL and applications. Receives and responds to incoming calls, pages and/or e-mails. Schedules and performs improvements, upgrades and repairs as assigned.

Ability to effectively prioritize/execute tasks in a high-pressure environment.

• Communication
• Time management
• Accountability
• Reliability
• Professionalism
• Collaboration
• Critical thinking
• Problem solving
• Prioritization
• Experienced in cybersecurity technologies and information systems

Minimum Qualifications

• Bachelor’s degree through an accredited institution or Intermediate level cybersecurity certification, such as SANS 500+ Series, CISA, or CISM
• 5-8 years of related work experience
• Experienced skills in cybersecurity technologies, systems and processes
• Advanced Troubleshooting skills
• Experienced skill in analysis, attention to detail, problem resolution, judgment, and decision-making
• Experienced skill in communication, presentation, and collaboration

Preferred Qualifications

• Advanced cybersecurity certification such as a CISSP or SANS 500+ series
• Depending on the roles focus:
• Experienced attestation and certification methodologies, such as SOC2
• Experienced in scripting and automation
• Experienced understanding cybersecurity assessment…