HealthPartners is currently hiring for a Cloud Security Analyst. This position provides technical consultation for system and data security and assists in the coordination, development, and implementation of security controls to reduce and manage risk to computer-stored information assets. The person in this position will audit and identify weakness and vulnerabilities to HealthPartners’ data and systems, provide analysis concerning resolution to risks and consult with IS&T groups to ensure compliance of established security processes and controls. This person will also participate in the application development/major enhancement process to ensure that new systems are developed with a correct level of internal and external security; delegate implementation tasks to junior level analysts; and promote security awareness throughout the company.

The analyst’s primary function is to oversee all email security which includes the routine maintenance of internal email relay servers used by HealthPartners’ data center(s) systems. This position also manages external email secure gateways, and tracks email deliveries, blocked emails, releasing quarantined emails, etc. The analyst manages an Agari platform which is used to manage our DMARC records for 14 email domains.

Required Qualifications:

• Bachelor’s degree or equivalent
• 5 years’ experience in Information Technology
• 3 years’ experience in Information Security using a tool like Cisco CES / Agari
• Excellent desktop tool proficiency including Microsoft products (e.g., Word, Excel, Access, and PowerPoint)
• Knowledge of the security aspects of multiple system platforms, operating systems, software communications, and network protocols.
• Experience coordinating projects.
• Knowledge of structured methodologies and standards such as ISO 27000, NIST, PMI, ITIL, CMMI, OWASP, and CoBit
• Knowledge of federal and state security-related legislation including HIPAA, PCI, JCAHO, NCQA 

Preferred Qualifications:

• CISSP or CISA Certification
• MobileIron experience (or other Mobile Device Management (MDM) vendor experience like AirWatch, etc.
• Working knowledge of multi-factor authentication (ex. Gemalto, SafeNet)

Hours/Location:

• M-F; Days
• Position is primarily remote but may need to come onsite for occasional events and team meetings.
• Position will participate in a weekly on-call 24/7 support rotation once every four weeks.
• Will provide afterhours support as needed.

Accountabilities:

• Promotes and implements IS&T’s security program to ensure the confidentiality, integrity and availability of HealthPartners’ network and infrastructure.
• Performs security forensic services; gathering and consolidating data artifacts.
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.
• Provides IS&T security control guidance and interpretation to IS&T Application, IS&T Technical Infrastructure, and HealthPartners’ staff and management.
• Provides security consultation on small to midsize projects.
• Updates Security Program documentation and recommends changes to the infrastructure to the Security Architect
• Promotes and educates staff on security principles and HealthPartners’ policy and process.
• Assists with the coordination and development of system security enhancements.
• Documents vulnerability finding trends and provides recommendations for root cause resolution.
• May coordinate changes to the security infrastructure; ensuring change management processes are followed and the appropriate documentation is gathered.
• Assesses and documents security deviation requests to ensure the appropriate risk, impact, and approvals are captured.
• Assess third party alignment to HealthPartners’ Security Standards.
• Gathers documentation and provides subject matter expertise for audit, regulatory requirements, and third parties.
• Maintains awareness of the latest developments in key areas of responsibility and presents opportunities that might benefit the organization.