Security Analyst - Identity Access Management (Salaried, Full time)

Organization Overview, Mission, Vision, and Values

Our mission is to improve the health of people in the communities we serve through compassionate, high-quality care, prevention, and wellness education. Washington Regional Medical System is a community-owned, locally governed, non-profit health care system located in Northwest Arkansas in the heart of Fayetteville, which is consistently ranked among the Best Places to live in the country.

Our 425-bed medical center has been named the #1 hospital in Arkansas for five consecutive years by U.S. News & World Report. We employ 3,200+ team members and serve the region with over 40 clinic locations, the region’s only Level II trauma center, and five Centers of Excellence - the Washington Regional J.B.

Hunt Transport Services Neuroscience Institute; Washington Regional Walker Heart Institute; Washington Regional Women and Infants Center; Washington Regional Total Joint Center; and Washington Regional Pat Walker Center for Seniors.

Position Summary

The role of the Security Analyst – Identity Access Management reports to the Information Security Manager. This position is responsible for establishing and maintaining access to systems and applications. This position will collaborate with internal and external clients to ensure the security needs of the organization are maintained.

Essential Position Responsibilities

• Serve on a distributed security and technology team responsible for establishing and maintaining identities and entitlements within IAM solutions
• Implement identity controls and settings that align with policies and governance structure
• Collaborate with internal and external clients to evaluate and implement access models that align with organizational risk posture
• Support IAM governance, policies, and solutions across SSO, directory, certificate, MFA, privileged accounts, automation, and behavior analytics systems
• Assess and resolve IAM issues that occur across the employee base, as well as with external entities
• Secure access to both on-premises and cloud infrastructure, as well as to applications required to support a distributed remote workforce
• Evaluate business impact and risk exposure based on the level of access granted and make recommendations where improvements should be made
• Partner with appropriate personnel regarding incidents and escalate to management, as needed
• Document access, policies, and exceptions, and maintain integrity for audit reviews
• Review internal, external and contractor accounts as part of periodic audits
• Continuously monitor for performance optimization strategies and report findings to leadership regarding for improvements in automation efficiencies, security practices and end-user experience
• Collect key performance indicators and related operational metrics, and track SLAs used to validate success as well as future areas of improvement
• Execute tactical requests and support the strategic vision for rigorous and scalable IAM controls
• Maintain understanding of business processes to aid in managing enterprise identity and access
• Continuously interact with business units to understand their plans, risk posture and tolerance, and how IAM supports their vision and business obligations with security in mind
• Implement IAM projects from inception to completion meeting deadlines and budgetary thresholds

Qualifications

• Education: Bachelor’s degree in computer science, engineering, information assurance or related field, preferred.
• Licensure and Certifications: SSCP, GSEC, GISF, preferred.
• Experience: Minimum 3 years’ experience with directory services, Windows, and Azure AD, SSO, MFA and role-based access control (RBAC). Experience with one or more regulatory requirements and laws such as, but not limited to, PCI, Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley (SOX), HIPAA, GDPR and GLBA, required.

Experience in one or more of the following preferred

ISO 17799, ITIL and NIST, required.

Work Environment

This position will spend 80% of time standing and/or walking while pushing, pulling, lifting, and/or carrying up to 50 lbs. This position will spend 20% of time sitting while performing work in a standard office environment.

Notice

This job description is designed to provide an overview of the essential and principal duties and responsibilities of the position. The job description is not designed or intended to cover or set forth a comprehensive listing of all activities, duties or responsibilities that are required of the employee.

Washington Regional reserves the right in its absolute discretion to change duties, responsibilities or activities or assign new duties, responsibilities, or activities at any time with or without notice. Employees may be directed to perform job-related tasks other than those specifically presented in this description.