Security Analyst (ACS Benefit Services)

Job Description

We are seeking an experienced Security Analyst to join the team at ACS Benefit Services, a subsidiary of Blue Cross NC. This role will have responsibility for protecting all data ingress/egress, at rest, PHI/PII and all aspects of cyber security. The ideal candidate will have a mixture of technical skills as well as understanding of the importance of documentation and attention to detail with working in a regulated industry.

Additionally, this role will be required to prepare for penetration tests, SOC I audits, 3rd party audits, vendor security assessments and other formalized reporting requirements.. May develop educational material, which initiates, indoctrinates or refreshes the knowledge about cybersecurity security policy. This role will be a thought leader and have direct input into the maturity of the ACS Cybersecurity Program as well as handling day to day operational security.

Qualification Requirements:

*** Candidates must reside in the Eastern or Central US Time Zones.  No other times zones or countries will be considered ***

Currently hiring in FL, GA, IN, KS, NC, SC, VA

Schedule: Mon-Fri / 8:00-5:00

Minimum Qualifications:

• 5+ years of hands-on cybersecurity/information security analysis in a Windows-centric environment
• Experience implementing security best practices to provide strong end-to-end solutions and the supporting documentation
• Demonstrated understanding of accessibility and security compliance
• Hands-on experience with Azure and/or AWS a plus
• Strong Windows experience needed
• Some Linux/Unix experience, desirable

Knowledge, Skills and Abilities:

Security Monitoring and Incident Response:

• Monitor and analyze security alerts and events from various sources, including security information and event management (SIEM) systems or working with an MSSP.
• Respond promptly to security incidents, conduct investigations, and implementing corrective actions.
• Collaborate with cross-functional teams to contain and eradicate security threats.

Vulnerability Management:

• Conduct regular vulnerability assessments and penetration testing to identify and address potential security weaknesses.
• Work with system administrators and application developers to remediate identified vulnerabilities.
• Stay current on emerging threats and vulnerabilities to proactively address potential risks.

Security Policy and Compliance:

• Develop, implement, maintain, and enforce security policies, procedures, and standards.
• Take ownership of the security portion of the SOC 1 type 2 audit process and adherence to IT security controls.
• Ensure compliance with relevant regulations and industry best practices.
• Conduct regular audits to assess adherence to security policies and standards.

Security Awareness and Training:

• Develop and deliver security awareness programs to educate employees on security best practices.
• Provide training to staff on security policies, procedures, and protocols.
• Foster a culture of security awareness and compliance throughout the organization.

Security Architecture and Design:

• Collaborate with IT teams to integrate security measures into the design and implementation of systems and applications.
• Participate in the evaluation and selection of security technologies and tools.
• Provide expertise in the development of secure architecture.
• Incident Documentation and Reporting:
• Document security incidents, investigations, and resolutions thoroughly.
• Prepare and present security reports to management, highlighting key metrics and trends.
• Collaborate with legal and compliance teams on incident reporting requirements.

Other Security Areas of Focus:

• Manage sensitive data related to HIPAA, PHI, PII and proprietary company information.
• Experience with project management; meeting deadlines, documentation, collaboration and communication models
• Experience with vendor relationships, time management, ability to work on simultaneous tasks and managing multiple competing priorities
• Ability to work in an autonomous team atmosphere
• Ability to work in project-based and ad-hoc technical need environment

Physical Demands:

• While performing the duties of this job, the employee is regularly required to talk or hear. This role routinely uses standard office equipment such as computers and phones.  This is mostly a sedentary role.

Work Environment:

• Remote Work-from-Home position. Requirements are a dedicated workspace with minimal distractions.

Benefits:

ACS strives to be a preferred employer in the Piedmont Triad area of North Carolina. Just as we focus on being accessible, caring, and trustworthy providers of our TPA services, we want to provide a work environment that mirrors those values. ACS Benefit Services provides our employees with numerous benefits including:

• Medical, Dental, Flexible Spending Plans
• Retirement plans - including 401(k) with generous employer match
• Educational opportunities
• Opportunities for advancement
• Encouragement for a work/life balance

#LI-DNI 

Salary Range

At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets,  licensure and certifications and other business and organizational needs. Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs. 

*Based on annual corporate goal achievement and individual performance.
 

Skills