- Company Name
- Joint Commission
- Job Title
- IT Security Analyst
- Job Description
-
**Job title:** IT Security Analyst
**Role Summary:**
Design, implement, and oversee the enterprise Identity & Access Management (IAM) governance program. Monitor security systems, analyze incidents, and enforce policies to maintain compliance with HIPAA, GDPR, NIST, and PCI standards. Provide expertise in tool selection, integration, and project management across IT functional areas.
**Expactations:**
- Deliver IAM projects on schedule and within budget.
- Maintain audit readiness and regulatory compliance.
- Respond to security incidents and log anomalies promptly.
- Collaborate cross‑functionally to align security initiatives with business objectives.
**Key Responsibilities:**
- Lead IAM governance for authentication, SSO/MFA, PAM, IGA, and EIAM.
- Plan and manage multiple IAM workstreams, ensuring delivery, compliance, and audit readiness.
- Monitor IDS, WAF, Office365, firewall logs; investigate and remediate anomalies.
- Conduct vulnerability assessments and compliance activities for internal/external audits.
- Perform security research, vendor evaluation, and solution testing under CISO direction.
- Enforce security policies, act as liaison for business/Service Desk/application owners.
- Execute incident response procedures per threat level.
- Produce security knowledge articles and update policies/procedures.
- Supervise 3rd‑party service providers and consultants as needed.
**Required Skills:**
- Strong analytical, critical‑thinking, and problem‑solving abilities.
- Excellent verbal and written communication.
- Project management (PMP/Project+) experience.
- Hands‑on experience with IAM, AD/Entra ID, LDAP, PowerShell, SSL, PKI, SSO, MFA, PAM, IGA.
- Knowledge of firewalls, IDS/IPS, WAF, and Office365 security.
- Familiarity with HIPAA, GDPR, NIST, PCI compliance frameworks.
- Ability to manage multiple priorities, influence cross‑functional teams, and maintain professionalism.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred).
- Minimum 5 years in IT security.
- Certifications: CISSP, Security+, IAM Associate, CISM, or equivalent (preferred).
- PMP or Project+ certification (preferred).
- ITIL and/or MOF Essentials certifications (preferred).