Security Analyst Associate, GRC

The Security Analyst Associate supports Northwestern Memorial Healthcare in advancing Northwestern Medicine’s mission through adherence to the Code of Ethics and the Corporate Compliance Program, along with compliance with applicable regulatory and accreditation standards.

Location and Schedule

Chicago, IL (onsite)

Compensation: USD 33 - 43 per hour

Key Responsibilities

• Assist with investigations of security alerts generated by security controls, and implement recommendations to improve detection capability accuracy.
• Contribute to the optimization of incident response standards and procedures to improve organizational cyber resiliency.
• Analyze the enterprise information security environment to identify potential gaps in security measures that help protect valuable information assets.
• Help identify, evaluate, and report information security risks.
• Collaborate with vendors and internal departments to support recommendations that optimize the performance of security controls.
• Partner with network and technology support teams to enhance and improve security processes and documentation.
• Participate in the evaluation and assessment of information security vulnerabilities, solutions, and organizational posture.
• Stay current with security technologies and threats to help contextualize observed events within the environment.
• Provide an initial assessment of incident impact severity for IT security incidents and execute appropriate response actions.
• Investigate fraud and other computer-related issues.
• Perform daily operational tasks for the department, including (but not limited to) analyzing security alerts.
• Perform daily operational tasks for the department, including (but not limited to) maintaining endpoint protection infrastructure.
• Perform daily operational tasks for the department, including (but not limited to) facilitating risk evaluation related to vulnerability assessment findings and coordinating risk treatment.

Required Knowledge and Experience

• 0-2 years of experience
• Working knowledge of Network fundamentals (protocols, topologies, TCP/IP)
• Working knowledge of Security controls including proxies, IPS, IDS, firewall, and packet analyzers
• Working knowledge of Systems including Windows and Linux/UNIX
• Working knowledge of Software development (development and scripting languages)
• Working knowledge of Incident Response
• Working knowledge of Threat and Vulnerability Management
• Working knowledge of Security Standards/Controls under IT governance and compliance models, including NIST, HIPAA, PCI, ISO 27001 & 27002, and ITIL
• Excellent problem-solving skills
• Demonstrated timely task completion supported by strong organizational skills, task tracking, follow-up, and productive peer interaction
• Excellent verbal and written communication skills

Technologies

• AI and automation
• Proxies, IPS, IDS, firewall, packet analyzers
• Windows, Linux/UNIX
• NIST, HIPAA, PCI, ISO 27001 & 27002, ITIL

Benefits

• Tuition reimbursement
• Loan forgiveness
• 401(k) matching

Preferred Qualifications

• Bachelor’s degree preferred or an equivalent combination of education and experience
• Certifications or courses: Security+, GSEC, GCWN, GCED, or CEH (a plus)

Artificial Intelligence Disclosure

Artificial Intelligence (AI) tools may be used in some portions of the candidate review process for this position; however, all employment decisions will be made by a person.

Background Check

Northwestern Medicine conducts a background check that includes criminal history on newly hired team members and, at times, internal transfers. If offered a position, you will be required to complete an authorization and disclosure form permitting Northwestern Medicine to run the background check. Results are evaluated case-by-case, and the process follows all local, state, and federal laws, including the Illinois Health Care Worker Background Check Act.