POSITION SUMMARY

The IT Data Security Analyst is responsible for participating in data security initiatives throughout Craig Hospital including administration of information security tools, ensuring secure devices, disseminating data security information, monitoring event management and policy development and enforcement.
Salary Range: $35.17 - $50.64 per hour based on experience
Posting closing date: March 31, 2025
This is a hybrid position that requires you to be a full-time Colorado resident.
Applications will be accepted until a sufficient number is received. Craig Hospital reserves the right to either close or extend a posting.

POSITION REQUIREMENTS

• Licensure/Certification/Registrations: One of the following certifications: CISSP/GIAC/SSCP/CISA/Security+ preferred
• Education: Bachelor’s degree in computer science or related field (preferred).
• Experience: 3 years or more of prior information technology experience.HIPAA-related data security and PCI preferred. Project management experience preferred.
• Skills & Abilities: Excellent interpersonal and leadership skills to be able to maintain good interpersonal relationships. Thorough understanding of TCP/IP network management and security administration, for LAN, WAN, and wireless network environments. Strong understanding of Microsoft environments and IP telecommunications. Working knowledge of Firewall administration, encryption technologies and wireless theory and wireless networking systems Able to manage multiple projects efficiently while meeting appropriate timelines. Solid understanding of routing, DNS, email systems, and computer access controls. Ability to architect, build, and maintain a stable, reliable, and secure network environment. Adequately document data and voice network infrastructures. To manage multiple projects efficiently with frequent interruptions. The ability to work independently, organize time effectively and the ability to coordinate appropriate resources. Ability to develop, implement and enforce data security measures. Skilled in both oral and in written communication. Strong customer-oriented people skills. Proven analytical, problem-solving, and troubleshooting skills. Commitment to quality and results.

Essential Functions

• Identify foreseeable data security risks, implement data security initiatives and ensure the protection of all electronic data. Assist with data security risks assessments and implement IT breach response procedures and activate as necessary.
• Identify foreseeable data security risks and ensures compliance with privacy and information security policies and procedures. Assist with the development and maintenance of all data security policies and procedures to ensure compliance and security initiatives are met.
• Provide technical support, troubleshooting, and problem-resolution services to computer and telephone end-users.
• Monitor and maintain network security throughout the data and voice networks. Areas of focus include: firewall security, wireless security, encryption, VPN, virus security, web filtering, secure e-mail, remote access security, NAC, network monitoring, Data Loss Prevention (DLP) and security.
• Keep current with regulatory requirements and have an understanding of IT governance and processes to meet those requirements.
• Design, develop and support information security architectural requirements. Maintain and support central logging systems, including IDS/IPS systems and configuration review.
• Perform installation, configuration management and implementation of data security systems. Maintain compliance tools, network security and host-based security systems. Perform system and application vulnerability testing.
• Identify, remove or otherwise mitigate known control weaknesses. Perform remedial actions as a result of threat and vulnerability assessments or audits. Prepare and analyze security incident and event data reporting.
• Establishment and enforcement of data classification standards and procedures.

** This job description is not intended to be an exhaustive list of all duties. Employee may perform other related duties as assigned.

BENEFIT ELIGIBLE POSITIONS:

At Craig Hospital we offer a wide range of outstanding benefits that allow our employees to tailor a benefits package that meets their individual needs. Planning a family or looking forward to retirement, we have options. Our medical insurance is a self-funded plan administered by Allegiance Benefit Plans with a CIGNA network of providers offering two different comprehensive plans. We offer dental insurance through Delta Dental, and vision insurance through EyeMed. Craig offers Health Care and Dependent Care Spending Accounts. Craig also provides, and pays for both Short Term and Long Term Disability Insurance plans for every benefit-eligible employee. We offer generous time-off benefits to allow you to enjoy your time away from work too! Additionally, we have a 403b Retirement Plan with a generous matching contribution through Empower Retirement that you are eligible for upon hire. Want to go back to school? We have Tuition Assistance. Unexpected emergency? We have Employee Assistance Programs and an Employee Emergency Assistance Fund.
At Craig, we believe in offering best-in-class benefits and prioritize benefits to support you.
Location: Craig Hospital · IT
Schedule: Full Time, Days, 8:00am-4:30p

• Identify foreseeable data security risks, implement data security initiatives and ensure the protection of all electronic data. Assist with data security risks assessments and implement IT breach response procedures and activate as necessary.
• Identify foreseeable data security risks and ensures compliance with privacy and information security policies and procedures. Assist with the development and maintenance of all data security policies and procedures to ensure compliance and security initiatives are met.
• Provide technical support, troubleshooting, and problem-resolution services to computer and telephone end-users.
• Monitor and maintain network security throughout the data and voice networks. Areas of focus include: firewall security, wireless security, encryption, VPN, virus security, web filtering, secure e-mail, remote access security, NAC, network monitoring, Data Loss Prevention (DLP) and security.
• Keep current with regulatory requirements and have an understanding of IT governance and processes to meet those requirements.
• Design, develop and support information security architectural requirements. Maintain and support central logging systems, including IDS/IPS systems and configuration review.
• Perform installation, configuration management and implementation of data security systems. Maintain compliance tools, network security and host-based security systems. Perform system and application vulnerability testing.
• Identify, remove or otherwise mitigate known control weaknesses. Perform remedial actions as a result of threat and vulnerability assessments or audits. Prepare and analyze security incident and event data reporting.
• Establishment and enforcement of data classification standards and procedures