The position responsibilities will include, but not limited to:

·        Serve as a cyber-security expert keeping apprised of emerging and ongoing industry trends and act as a focal point for IT Security investigations.

·        Develop strong and trusting relationships with business personnel and liaison with internal teams on information security matters.

·        Administer and monitor intrusion detection/prevention, antivirus, antimalware, data loss prevention, vulnerability management, and security information and event management systems.

·        Assist with the design, implementation, management and enforcement of security and compliance policies, procedures, and best practices.

·        Assist with coordinating, scheduling, and remediation of Security Reviews such as 3rd party Risk Assessments and Penetration Tests.

·        Assist with the design, implementation, and analysis of all business systems as it relates to security, such as the protection of PII and PHI, to ensure information system security across the enterprise.

·        Assist with the design and implementation of Security Awareness programs such as Phishing campaigns and Security training.

·        Other duties as assigned by the Director, Information Security.

Must Have Skills/Experience:

·        5 years’ experience in overall IT experience or 3 years of Security/Compliance experience.

·        CompTIA Security+ or equivalent certification.

·        Experience with EDR, MDR, SIEM, IDS, IPS, IdP, PIM and PAM security tools and services.

·        Prior background in technical roles such as System Administration or Development, with a clear and abiding interest in information security.

·        Excellent verbal, written, and interpersonal skills with a proven ability to communicate at various levels within the organization and with external parties.

·        Ability and confidence to take calculated risks in uncertain or ambiguous situations.

·        Excellent organizational skills and demonstrated ability to manage multiple competing priorities and assignments.

Preferred Skills/Experience:

·        ISC2 Systems Security Certified Practitioner (SSCP)

Experience · with NIST Cybersecurity Framework 1.1 and NYDFS 500.03