Organization:
SHSO-Sutter Health System Office-Valley

Position Overview:
Monitors, correlates, and analyzes security event data from a number of security solutions and technical systems. Aids in the development and coordination of system security plans and their implementation. Provides hands-on security administration of a broad range of security duties, including correlating, analyzing, researching, testing, and monitoring. Performs vulnerabilities scans across the environment and track remediation efforts. Develops periodic reports on security metrics, remediation progress, and deficiencies and then present them to management. Assists with preparing training materials and presentations for various cyber security initiatives.

(Intended for use by SHSO only)

Job Description:

****Please Note: While this position is listed as hybrid, regular in-office attendance is required. Candidates should be prepared to commute to the office on a consistent basis to support team collaboration and business needs.****

EDUCATION:
Equivalent experience will be accepted in lieu of the required degree or diploma.

• Bachelor's in Business, Cybersecurity, Computer Science, Information Technology/Security, Risk Management, or related field

TYPICAL EXPERIENCE:

• 2 years recent relevant experience.

PREFERRED EXPERIENCE:

• Third-party/vendor security risk assessments
• Conducting formal risk assessments
• GRC or third-party risk management platforms (e.g., ServiceNow VRM or equivalent)
• Continuous security monitoring tools (e.g., BitSight or similar).
• Experience assessing security risks affecting protected health information (PHI

SKILLS AND KNOWLEDGE:

• Knowledge of information systems security concepts and current information security trends and practices including security processes and methods.
• General knowledge of Federal and State IS security and privacy-related regulatory requirements and laws.
• General knowledge regarding National Institute of Standards and Technology (NIST), Health Insurance Portability and Accountability Act (HIPAA), Federal Information Processing Standards (FIPS), and other recognized industry security standards. and best practices.
• General understanding of Diagnostic peritoneal lavage (DLP) and DLP technologies.
• General understanding of using Microsoft windows workstation and server, Unix/Linux and network OS's.
• Knowledge of software, hardware, databases, networks, firewalls, encryption, and other systems security devices, including a good understanding of end point operating systems (Windows and Linux), internet technologies such as Domain Name System (DNS), routing, Simple Mail Transfer Protocol (SMTP), Hypertext Transfer Protocol (HTTP), Dynamic Host Configuration Protocol (DHCP), and File Transfer Protocol (FTP), and familiarity in a command line environment.
• Familiarity in a command line environment.
• Written/verbal interpersonal communication skills with the ability to interact effectively with a broad and diverse group of peers, users, and executives.
• Proven ability to prioritize work while multi-tasking on assigned work.
• Ability to perform and conduct Incident Response and participate in security incident and post incident response process.
• Ability to break down highly complex technical topics into language and diagrams understandable to a wide audience.
• Working knowledge of common enterprise applications, e-mail, web, cloud, client/server applications.

These Principal Accountabilities, Requirements and Qualifications are not exhaustive, but are merely the most descriptive of the current job. Management reserves the right to revise the job description or require that other tasks be performed when the circumstances of the job change (for example, emergencies, staff changes, workload, or technical development).

Job Shift:
Days

Schedule:
Full Time

Days of the Week:
Monday - Friday

Weekend Requirements:
As Needed

Benefits:
Yes

Unions:
No

Position Status:
Exempt

Weekly Hours:
40

Employee Status:
Regular

Pay Range is $117,436.80 to $176,155.20 / annual salary

The compensation range may vary based on the geographic location where the position is filled. Total compensation considers multiple factors, including, but not limited to a candidate's experience, education, skills, licensure, certifications, departmental equity, training, and organizational needs. Base pay is only one component of Sutter Health's comprehensive total rewards program. Eligible positions also include a comprehensive benefits package.