Information Security Analyst (32634)

About the role

ExamWorks is seeking an Information Security Analyst to respond to security-related requests from customers concerning physical access, firewall issues, content filtering, spam filtering, and virus protection. This position will identify security risks, develop mitigation plans, manage vulnerability analysis, and assist with both physical site and data system audits.

Responsibilities

• Respond to security-related help requests from customers regarding physical access, firewalls, content filters, email security appliances/spam filters, virus protection, and physical/logical asset tracking and protection.
• Identify security risks and develop mitigation plans.
• Manage and audit firewall rules.
• Perform IEM log analysis.
• Manage, develop, and maintain Threat and Vulnerability Management initiatives.
• Manage content filters.
• Troubleshoot and resolve IT security-related issues effectively and efficiently.
• Prioritize, evaluate, resolve, and/or escalate issues as required.
• Provide detailed and timely follow-up support to customers.
• Submit accurate and well-documented solutions for inclusion in the knowledge base.
• Participate in security-related projects.
• Review and update security policies and procedures.
• Participate in security compliance audits (e.g., SOX, SOC, HiTRUST), completing tasks individually and cooperatively.
• Evangelize security within the organization and advocate for customer trust.
• Maintain confidentiality of all proprietary information.
• Collaborate on the planning, design, implementation, documentation, and deployment of security projects, appliances, and applications.
• Attend VAR and vendor meetings as needed.
• Serve as a Subject Matter Expert (SME) for security-related tools and applications.
• Create documentation for security-related tools, applications, and processes.
• Occasional travel, including to data centers (10-15% of the time, some international).
• Perform all other duties as assigned.

Requirements

• College degree in Computer Science or a related field.
• Five years of experience in IT, with two years specifically in IT security.
• Preferred experience with industry audit standards and security frameworks.
• Strong experience and detailed technical knowledge in security concepts, practices, and analysis, including system and network security, authentication and security protocols, cryptography, and application security.
• Minimum of Security+, GIAC, or EC Council certification(s), or equivalent.
• Familiarity with Checkpoint, Palo Alto, or Cisco firewalls; Cisco Ironport; Trend Micro AV; Threat and Vulnerability Management; 2-factor Authentication; Access Control Systems; SIEM products; VMware products; Asset Management and Tracking; SIE.

Skills

• Ability to follow instructions and respond accurately to management directions.
• Advanced computer troubleshooting, analysis, critical thinking, and problem-solving skills.
• Ability to stay focused and concentrate under normal or heavy distractions.
• Ability to work well under pressure and manage change, delays, or unexpected events.
• Demonstrated accuracy, thoroughness, and commitment to quality.
• Ability to learn multiple programs and systems quickly.
• Exceptional communication skills, including conveying information accurately, listening effectively, and asking clarifying questions.
• Ability to prioritize work activities and use time efficiently.
• Ability to maintain confidentiality.
• Ability to promote a positive, team-oriented environment.
• Ability to stay focused without distracting others.
• Availability for after-hours on-call coverage as part of a rotation schedule.
• Ability to follow all company policies and procedures.

About the company

ExamWorks is a leading provider of innovative healthcare services, including independent medical examinations, peer reviews, bill reviews, Medicare compliance, case management, record retrieval, and document management. Our clients include property and casualty insurance carriers, law firms, third-party claim administrators, and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability, and workers' compensation insurance coverages.

Benefits

• Competitive benefits (medical, vision, dental).
• Paid time off.
• 401k.