Femwell Group Health is Florida’s leading management services organization (MSO) providing cost-effective business solutions so physicians can efficiently and profitably run their practices.

From managed care support to accounting and marketing, the members of our team work with physicians every step of the way to maximize productivity and efficiency for a better bottom line. We have a unique understanding of the complexities of operating a large physician group and have the expertise required to work with any medical group all the way from the early formation stages to on-going management

Job/Position Summary:

The Information Security Analyst will plan, implement, upgrade, and monitor security protocols for the protection of the organization’s computer networks and information.

Essential Functions & Responsibilities:

Vulnerability Management - Maintains inventories and inventory processes of information resources protected by security regulations so vulnerability assessments can be performed. Uses tools and processes to effectively carry out vulnerability testing. Monitors and improves vulnerability management processes and procedures. Interprets scanning or testing results and provides consultation to network, workstation, systems, or web-applications administrators regarding system and application weaknesses. Appropriately escalates issues presenting an unacceptable risk to the IT leadership. Monitors risk mitigation progress.
Security Architecture, Consulting, and Evaluation - develops security architecture components for newly proposed information systems and technologies using diagrams and narratives. Assists in materializing security architecture into projects. Develops and maintains and applies tools, processes, and procedures to evaluate the suitability of security configuration and feature offerings of proposed systems.
Information Security Risk Analysis - Develops, maintains, and applies tools, methods, and processes to analyze risk from threats to confidential information. Writes appropriate recommendations that will bring risks to an acceptable level. Develops and delivers audience-appropriate information security assessment and recommendation presentations and reports. Establishes and maintains sound metrics to track and demonstrate information security improvement and risk management. Prepares risk assessment reports for technical and executive audiences.
Security Incident Prevention, Detection, and Handling - Develops, maintains, communicates, and applies incident management policy, standards and procedures. Researches, evaluates, recommends, designs technical policies for, and implements security technologies such as web content filtering systems, email filtering systems, endpoint protection systems, network firewall systems, intrusion prevention and detection systems (IDS/IPS), data loss protection (DLP) systems, security incident event management (SIEM) systems to prevent, detect and respond appropriately to threats to confidential information and information resources. Monitors security systems; recognize anomalies of various systems, and handles or escalates appropriately. Writes professional and factual incident reports. Makes recommendations for recovery and prevention.
Data Analysis - Analyzes security threat intelligence, and tunes and calibrates security systems to improve effectiveness. Analyzes and correlates network dataflow logs, weblogs, computer and application user activity logs, and security incident logs for information relevant to real or potential information security or privacy breach or to support decision making and risk mitigation.
Project Management - Lead discovery and information gathering sessions. Perform alternatives analysis documenting pros and cons, cost, feasibility, risk, and other information to support a decision to select the best solution. Manage small to medium projects; assemble project participants to organize work to complete specific tasks on projects. Organize and facilitate meetings to identify and remove barriers, and to progress work. Follow-up with assignees on incomplete tasks and open issues. Provide detailed communication between disparate teams to keep the project moving.
Other – Trains and assists less experienced information security staff and IT staff regarding security methods for systems they support. Takes on-call for urgent security events. Performs other related duties as assigned.
Collaborates with users to discuss computer data access needs, identify security threats and violations, and identify and recommend needed programming or process changes.
Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information.
Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.
Reviews violations of security procedures; provides training to ensure violations do not recur.
Monitors and restricts access to sensitive, confidential, or other high-security data.
Modifies security files and applications as able and necessary to provide specialized access, allows new software to be installed or integrated, or correct errors.
Performs risk assessments, audits, and tests to ensure the proper functioning of data processing activities and security measures.
Safeguards system security and improve overall server and network efficiency by training users and promoting security awareness.
Determines when to update virus protection systems by monitoring current reports of computer viruses; facilitates or performs needed updates.

Essential Required Competencies:

Demonstrated problem-solving and analytical skills.
Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication.
Proficient in Microsoft Office Suite or related software.
Excellent verbal and written communication skills.
Organized with attention to detail.

Required Education and Experience:

Bachelor’s degree in computer science, programming, or a related field required; M.B.A. in Information Systems preferred.
At least three years of experience in computer systems with some specialization in computer security is highly preferred.
Knowledge of HIPAA Security preferred

Physical Requirements:

While performing the duties of this Job, the employee is regularly required to use hands to finger, handle, or feel and reach with hands and arms. The employee is frequently required to stand; walk; sit; climb or balance; stoop; kneel; crouch or crawl, and talk or hear. The employee must regularly lift and/or move up to 10 pounds, and frequently lift and/or move up to 25 pounds. Must be able to stoop, bend, and lift overhead on a frequent basis. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.
Normal office environment.

How to Apply:

If you are interested in this position, please send your resume along with a cover letter to Bijoy Joseph, Vice-President of IT Services @ bjoseph@femwell.com

Please be sure to include the following in your e-mail:

The title of the position you are applying for in the subject line
The date at which you are available to start
Your salary requirement
Your contact information

Should you be a good fit, someone will contact you regarding an interview.

Please note that submitting your resume does not guarantee an interview or position placement.

Femwell Group Health

New Jobs

Information Security Analyst