Sr. Vulnerability Analyst
Senior Vulnerability Analyst is a key role in advancing vulnerability management throughout the HFHS enterprise through technical expertise with a focus on threat intelligence, vulnerability management, and offensive security. The Senior Vulnerability Analyst works collaboratively to support the identification, assessment, mitigation, and monitoring of vulnerabilities by utilizing various security tools and other techniques. The Senior Vulnerability Analyst independently develops assessment plans, supports, or leads projects, and may also manage the activities of security personnel that are focused on aspects of the Threat and Vulnerability Management program. The Senior Vulnerability Analyst reports to the Vulnerability Management Services Manager. In conjunction the Senior Vulnerability Analyst works in a collaborative effort with IT to assure vulnerability management and policy compliance security programs and technical controls are compliant with policies, applicable laws, and regulations.
EDUCATION AND EXPERIENCE:
- Bachelor's degree in business administration, Engineering, and Information Systems, Information Assurance or closely related field, required
- Minimum seven (7) years of related IT or security experience, which includes five (5) years of direct information security experience, and a minimum of one (1) year experience directly related to offensive testing and/or threat assessment.
- Strong working experience and understanding of industry leading vulnerability management tools. CISSP, CISM, or CISA is recommended. OSCP, CRTO, or other offensive testing certification is recommended.
- Experience providing working knowledge and skills in the following: Security laws, mandates, standards, and best practices (i.e., HIPAA, ISO, ACA, DFIS, NACHA, Payor customer group security requirements, PCI, HITECH, GLB, etc.).
- Demonstratable relevant work experience within information security including the areas of operational / technology auditing & risk, offensive testing, threat assessment, and vulnerability management.
- Experience or knowledge of technical and operational, business and healthcare environment preferably Payor related healthcare activities.
- Familiarity with national security standards, business continuity, disaster recover, auditing, risk management, vulnerability assessments, regulatory compliance, and incident management.
- Strong understanding of project management and information technology background. Good analytical, organizational, verbal, and written communication skills. Ability to solve problems in a dynamic team environment and handle multiple assignments in a timely manner.
- Experience in conflict management skills necessary to resolve issues where corporate areas disagree.
- Ability to effectively interface with various levels of management internally and as well as contacts outside the organization.
- Must be able to travel to other HFHS and Subsidiary facilities and vendor sites to meet with operating or audit personnel.
- A service focused team player who can lead and mentor team members. Excellent customer service and interpersonal skills demonstrated both over the phone and face-to-face to communicate technical information in non-technical terms.
- Consensus building and collaborative interpersonal skills. Good presentation skills.
- Ability to work under pressure, establish priorities and respond with urgency.
- Self-motivated with excellent verbal and written skills.
Overview
HAP is a Michigan-based, nonprofit health plan that provides health coverage to individuals, Â Â Â Â Â companies and organizations. A subsidiary of Henry Ford Health System, we partner with doctors, employers and community groups to enhance the overall health and well-being of the lives we touch. With more than 1,100 dedicated and passionate employees, our goal is to make health care easy for our members.
Â
Under the leadership of President and CEO Robert G. Riney, Henry Ford Health is a
$6 billion integrated health system comprised of six hospitals, a health plan, and 250+ sites
including medical centers, walk-in and urgent care clinics, pharmacy, eye care facilities and
other healthcare retail. Established in 1915 by auto industry pioneer Henry Ford, the health system
now has 32,000 employees and remains home to the 1,900-member Henry Ford Medical Group, one
of the nation’s oldest physician groups. An additional 2,200 physicians are also affiliated with the
health system through the Henry Ford Physician Network. Henry Ford is also one of the region’s Â
major academic medical centers, receiving between $90-$100 million in annual research funding and
remaining Michigan’s fourth largest NIH-funded institution. Also an active participant in medical
education and training, the health system has trained nearly 40% of physicians currently practicing
in the state and also provides education and training for other health professionals including nurses,
pharmacists, radiology and respiratory technicians. visit HenryFord.com.
Benefits
Whether it's offering a new medical option, helping you make healthier lifestyle choices or
making the employee enrollment selection experience easier, it's all about choice. Â Henry
Ford Health System has a new approach for its employee benefits program - My Choice
Rewards. Â My Choice Rewards is a program as diverse as the people it serves. Â There are
dozens of options for all of our employees including compensation, benefits, work/life balance
and learning - options that enhance your career and add value to your personal life. Â As an
employee you are provided access to Retirement Programs, an Employee Assistance Program
(Henry Ford Enhanced), Tuition Reimbursement, Paid Time Off, Employee Health and Wellness
and access to day care services at Bright Horizons Midtown Detroit, and a whole host of other
benefits and services. Employee's classified as contingent status are not eligible for benefits
Equal Employment Opportunity/Affirmative Action Employer
Equal Employment Opportunity / Affirmative Action Employer Henry Ford Health System is
committed to the hiring, advancement and fair treatment of all individuals without regard to
race, color, creed, religion, age, sex, national origin, disability, veteran status, size, height,
weight, marital status, family status, gender identity, sexual orientation, and genetic information,
or any other protected status in accordance with applicable federal and state laws.