IT Security Analyst (Atwater)

The IT Security Analyst will assist the Enterprise IT Security Risk Management Team in monitoring, analyzing, and responding to security events to safeguard the confidentiality, integrity, and availability of our healthcare systems and data.

This position will work at our Atwater Administration Office. Schedule is Monday – Friday, 8:00am – 5:00pm.

Compensation: $29.94 - $32.04 an hour

Golden Valley Health Centers offers excellent benefits including Medical: (0 Deductible / $2,000 Individual; $4,000 Family Out-of-Pocket Max), excellent PPO coverages; Dental; Vision; 403(b) with match, FSA plans, gym discounts, and so much more!

Essential Duties and Responsibilities

• Monitor security tools (e.g., firewalls, intrusion detection systems, antivirus software) for alerts and potential threats. Trigger remediation activities as required.
• Monitor application control systems to ensure only authorized software is used within the organization. Trigger remediation activities as required.
• Monitor Privileged Access Management (PAM) tools to secure and track privileged account usage. Trigger remediation activities as required.
• Monitor Data Loss Prevention (DLP) systems to prevent unauthorized access or leakage of sensitive healthcare data. Trigger remediation activities as required.
• Investigate and document security incidents under senior management guidance, escalating issues as needed.
• Review logs, reports, and alerts to identify unusual activity or threats, with training provided to build analysis skills.
• Assist in maintaining compliance with healthcare regulations (e.g., HIPAA) through routine checks and audits.
• Document/Update security processes and assist with maintaining system documentation. Prepares monthly security report and variance reports.
• Support security awareness efforts by preparing materials, assisting end-users with one-on-one best practice training and best practice training of larger groups of GVHC end-users.
• Work with IT Service Desk, Engineering, and Security Operations team members to resolve issues and enhance security.
• Other duties as assigned.

Physical Demands

• The employee must occasionally lift and/or move up to 30 pounds. Moving, lifting or transferring materials/supplies may involve lifting or pushing greater than 30 pounds, should be done with assistance as appropriate.
• Specific vision abilities required by this job include close vision and the ability to adjust focus.
• Must be able to hear staff on the phone and those who are served in person and speak clearly to communicate information to end-users and colleagues.
• Must be able to have vision that is adequate to read memos, a computer screen, and administrative documents.
• Must have high manual dexterity.
• Must be able to squat and sit, stand, stoop, crouch, reach, twist, turn and feel.

Work Environment

The physical environment requires the employee to work indoors, primarily in an office setting. The noise level inside is quiet to average. Use of general office equipment is required on a daily basis.

Education/Experience Requirements

Minimum Qualifications:

• Basic knowledge of computer networks, operating systems (Windows/Linux), and IT fundamentals.
• Understanding of cybersecurity concepts (e.g., malware, phishing, firewalls)—demonstrated through education or certification (e.g., CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), Microsoft Certified: Security, Compliance, and Identity Fundamentals or equivalent).
• Strong problem-solving skills and eagerness to learn.
• Clear communication skills for teamwork and documentation.
• Detail-oriented with an ability to follow instructions.

Education/Experience:

• High school diploma or equivalent.
• Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, or a related field with coursework in cybersecurity, OR a recognized cybersecurity certification (e.g., CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), Microsoft Certified: Security, Compliance, and Identity Fundamentals or equivalent) plus a minimum of two (2) years relevant IT .