Cloud Information Security Analyst

Ardent Health is a leading provider of healthcare in growing mid-sized urban communities across the U.S. With a focus on people and investments in innovative services and technologies, Ardent is passionate about making healthcare better and easier to access. Through its subsidiaries, Ardent delivers care through a system of 30 acute care hospitals, 24,000 team members and more than 280 sites of care with over 1,800 affiliated providers across six states.

POSITION SUMMARY:

The Information Security Analyst – Cloud Security is cloud focused role that requires in-depth knowledge of current Cloud security practices, regulations, standards, configurations and key technology. This role is responsible for the monitoring and operational security support of the AHS Cloud environment. A successful candidate in this role strives to follow Information security best practices, policies, standards and guidance to ensure the safeguard of proprietary data, infrastructure and resources from internal and external threats. This role will also assist other members of the Ardent Information Security Operations team and key corporate/partner/business units in support of the AHS Company Mission and strategic business initiatives.

• Monitoring Azure and M365 environments for unusual activity, reviewing for system intrusions and taking action when required.
• Support the compliance and security requirements within Microsoft’s cloud environment includes Identity protection, Data security (classification and DLP, and CoPilot to name a few).
• Works with other business units, partners and customers to maintain secure methods of data management
• Deliver security compliance in our growing cloud footprint in Microsoft Azure.
• Engage and collaborate with other technical teams to advocate and advance our security posture.
• Participate in tabletop exercises / training.

Required Qualifications

• Associates degree or equivalent technical training/experience.
• Experience monitoring and managing cloud services models such as SaaS, PaaS, and IaaS for system security.
• Familiarity with Information Security frameworks and standards (i.e. PCI DSS, HITRUST, HIPAA, NIST, MITRE)
• Working knowledge of general computing concepts (OSI reference model, multi-tiered application architecture, operating systems, etc.)
• Understanding of the technical components of a Cloud infrastructure/architecture and their interactions (preferably Microsoft Azure).
• Knowledge of Data Loss Prevention (DLP), Data labeling and classification technologies.
• General knowledge of related third-party software products (firewalls, intrusion detection systems, filtering routers, VPNs, security scanners).
• Knowledge of common networking protocols and services and their relevant security issues (TCP/IP, DNS, SNMP, SMTP, etc.).
• Cloud security related strategies, policies and standards
• Data Loss Prevention design, implementation and support.

Preferred Qualifications

• Reputable security certifications (Microsoft AZ-500, AWS, CISSP, CCSP, CEH, HCISPP, GIAC, CISA).
• Solid time management and collaboration skills, especially in a cross-functional dynamic team environment.
• Excellent oral and written communication skills with the ability to present and discuss technical information in a manner that establishes rapport, persuades others, and allows the individual to increase understanding of subject matter.
• Excellent analytical skills to identify high risk security breach opportunities or trends.
• Ability to collaborate with IT&S and business area professionals to identify/recommend applicable security practices/controls rather than dictating security methods.
• Ability to balance the seriousness of protecting electronic information assets with the need to enable users to effectively and efficiently use systems to perform job responsibilities, while continuing to emphasize quality patient care.