Information Systems -Security Analyst

About Shepherd Center 

With five decades of experience, Shepherd Center provides world-class clinical care, research, and family support for people experiencing the most complex conditions, including spinal cord and brain injuries, multi-trauma, traumatic amputations, stroke, multiple sclerosis, and pain. An elite center ranked by U.S. News as one of the nation’s top hospitals for rehabilitation, Shepherd Center is also recognized as both Spinal Cord Injury and Traumatic Brain Injury Model Systems. Shepherd is the only rehabilitation facility in the nation with an intensive care unit on-site, allowing us to care for the most complex patients and begin the rehabilitation process sooner. Shepherd Center treats thousands of patients annually with unmatched expertise and unwavering compassion to help them begin again.

Shepherd Center's culture is one of hope, humor, and hard work. You will enjoy career growth, strong relationships with co-workers, strong support from leadership, and fun activities that have kept over 12% of staff members working at Shepherd for more than 20 years.  

The IS Security Analyst is responsible for managing the day-to-day operations of the organization's security systems, as well as identifying, investigating, and resolving security breaches. Additional duties include supporting the implementation of new security technologies, contributing to the development and maintenance of security policies and procedures, conducting vulnerability assessments and audits, and managing firewall configurations and monitoring. This role requires a strong awareness of organizational security objectives and a commitment to upholding established security standards. The analyst also adheres to safety policies, reports incidents, and ensures compliance with regulatory and organizational requirements.

JOB RESPONSIBILITIES

Accountabilities:

• Implement, monitor, and maintain security controls to protect Shepherd Center’s IT infrastructure
• Triage and respond to security events per incident response protocols
• Assist in developing and enforcing secure configurations for networks, servers, workstations, and applications
• Manage and monitor firewall systems, including configuration, rule management, and troubleshooting
• Collaborate with users to ensure security measures do not hinder business operations
• Stay informed on current and emerging information security threats
• Support and contribute to the Security Education, Training, and Awareness (SETA) program
• Remain stationary for extended periods; may occasionally lift up to 50 lbs. for hardware installation
• Available for flexible or extended hours during security incidents or disaster recovery events
• Perform additional duties as required

REQUIRED MINIMUM EDUCATION

• Bachelor’s degree in Information Technology/Information Security related field.

REQUIRED MINIMUM CERTIFICATION

• Possess or be working towards Information Security related certifications.
• Vendor specific certifications from Cisco and Microsoft are a plus.

REQUIRED MINIMUM EXPERIENCE

• 5 years minimum in a dedicated information security role
• Possess or be working towards Information Security related certifications.
• Vendor specific certifications from Cisco and Microsoft are a plus.

REQUIRED MINIMUM SKILLS

• Experience configuring and managing antimalware systems (EDR, XDR, etc)
• Experience configuring, managing, and monitoring enterprise firewalls

PREFERRED QUALIFICATIONS

• CISSP, SANS, ISACA, or vendor specific certifications

PHYSICAL DEMANDS

• Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time or exerting up to 15 pounds of force occasionally or a negligible amount of force frequently to lift, carry, push, pull, or otherwise move objects, including the human body.

WORKING CONDITIONS

• Normal office environment.