What are the responsibilities and job description for the Information Security Analyst position at Central California Alliance for Health (Remote)?
We have an opportunity to join the Alliance as an Information Security Analyst in the Information Technology Services Division.
WHAT YOU'LL BE RESPONSIBLE FOR
Reporting to the Information Security Manager, this position:
- Performs analysis of Alliance information security practices to ensure alignment with industry standards and guidelines
- Identifies, investigates, and resolves security breaches detected by Alliance security solutions
- Participates in the creation and maintenance of policies, standards, guidelines, and procedures related to information security
- Leads and performs staff training on information security and security breach prevention
THE IDEAL CANDIDATE
- Brings a broad foundation across multiple areas of information security, including network security, endpoint protection, identity and access management, and cloud security, in a healthcare environment
- Demonstrates strong knowledge of security frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory requirements (e.g., HIPAA, PCI-DSS, GDPR)
- Skilled in monitoring, analyzing, and responding to security incidents using SIEM tools and other detection technologies
- Able to perform vulnerability assessments, interpret findings, and recommend practical remediation steps
- Comfortable with both proactive (risk assessments, audits, security awareness training) and reactive (incident response, forensic analysis) security functions
- Effective communicator who can explain technical risks and solutions to both technical teams and non-technical stakeholders
- Strong problem-solving mindset and attention to detail; able to anticipate threats and implement preventive measures
- Demonstrated ability to collaborate across IT, compliance, and business units to align security with organizational goals
- Keeps current with emerging cyber threats, trends, and best practices
- CISSP or CISM a plus
WHAT YOU'LL NEED TO BE SUCCESSFUL
To read the full position description and list of requirements, click here.
- Knowledge of:
- HIPAA and FISCAM security guidelines
- Computer network penetration testing
- Security frameworks, such as NIST, ISO 27001, and COBIT
- Firewalls, proxies, SIEM, antivirus, and IDPS concepts
- Security systems, operating systems, and virtualization
- Ability to:
- Identify, mitigate and educate staff regarding the avoidance of network vulnerabilities
- Write clearly, concisely and precisely and convey information to the intended audience in a manner that is easily understood
- Interpret and synthesize a wide range of information from a variety of sources and translate complex information and concepts into clear, succinct documentation
- Develop training materials and conduct staff training
- Demonstrate strong analytical and problem-solving skills, define issues, conduct research, and analyze and interpret data
- Education and Experience:
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
- A minimum of eight years of professional-level information technology experience, which included a minimum of three years of experience performing information security functions in a health care environment (a Master's degree may substitute for two years of the required experience); or an equivalent combination of education and experience may be qualifying
OTHER INFORMATION
- We are in a hybrid work environment and we anticipate that the interview process will take place remotely via Microsoft Teams.
- While some staff may work full telecommuting schedules, attendance at quarterly company-wide events or department meetings will be expected.
- In-office or in-community presence may be required for some positions and is dependent on business need. Details about this can be reviewed during the interview process.
The full compensation range for this position is listed by location below.
The actual compensation for this role will be determined by our compensation philosophy, analysis of the selected candidate's qualifications (direct or transferable experience related to the position, education or training), as well as other factors (internal equity, market factors, and geographic location).
Typical areas in Zone 1: Bay Area, Sacramento, Los Angeles area, San Diego area
Typical areas in Zone 2: Fresno area, Bakersfield, Central Valley (with the exception of Sacramento), Eastern California, Eureka area
OUR BENEFITS
- Medical, Dental and Vision Plans
- Ample Paid Time Off
- 12 Paid Holidays per year
- 401(a) Retirement Plan
- 457 Deferred Compensation Plan
- Robust Health and Wellness Program
- Onsite EV Charging Stations
- And many more
ABOUT US
We are a group of over 500 dedicated employees, committed to our mission of providing accessible, quality health care that is guided by local innovation. We feel that our work is bigger than ourselves. We leave work each day knowing that we made a difference in the community around us.
The Alliance is an equal employment opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. We are an E-Verify participating employer
Join us at Central California Alliance for Health (the Alliance) is an award-winning regional Medi-Cal managed care plan that provides health insurance for children, adults, seniors and people with disabilities in Mariposa, Merced, San Benito and Santa Cruz counties. We currently serve more than 418,000 members. To learn more about us, take a look at our Fact Sheet.
At this time the Alliance does not provide any type of sponsorship. Applicants must be currently authorized to work in the United States on a full-time, ongoing basis without current or future needs for any type of employer supported or provided sponsorship.
