For more than 50 years, the nonprofit Brooks Rehabilitation, headquartered in Jacksonville, Fla., has been a comprehensive system of care for physical rehabilitation. Named by Newsweek as the number one Physical Rehabilitation Center in Fla., Brooks operates two inpatient rehabilitation hospitals, including the nation’s largest with 170 beds; one of the region’s largest home healthcare agencies; more than 40 outpatient therapy clinics; the Brooks Rehabilitation Medical Group; two skilled nursing facilities; assisted living; memory care; and a Center for Inpatient Rehabilitation in partnership with Halifax Health (Daytona Beach). Brooks operates the Clinical Research Center, which specializes in advanced research to further the science of rehabilitation. Brooks also provides many low- or no-cost community programs and services to improve the quality of life for people living with physical disabilities. For more information, visit BrooksRehab.org .

The Information Security Analyst contributes to the improvement and maintenance of an effective enterprise security program through the analysis of vulnerability scans, the maintenance of monitoring tools, and the enforcement of policy. Other tasks will include participating in the selection of appropriate security solutions, remediating the results of vulnerability audits, contributing to risk assessments, and completing IT security projects. The Information Security Analyst is expected to interface with peers in the Systems, Network, Application and Analytics departments as well as with the leaders of business units to share the corporate security vision and provide education and training as required.

Responsibilities:

Strategy & Planning

• Monitor the enterprise environment for potential security risks and anomalies.
• Analyze and triage of security alerts escalating incidents when necessary.
• Produce detailed documentation of analysis and response activities.
• Contribute to the maintenance of the enterprise’s security awareness training program.
• Contribute to the maintenance of the enterprise’s security documents.
• Coordinate the response to and action plans resulting from Risk Assessments and other IT audits.
• Participate and document IT Business Impact analysis.
• Participate in the maintenance of the IT Disaster Recovery Plan.
• Coordinate remediation efforts with other teams as necessary
• Assist with creating and tuning security monitoring use cases
• Assist with creating and improving Threat Management process and procedure
• Generate periodic security metric reports

Acquisition & Deployment

• Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Assist with the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
• Review new software and technology acquisitions for security risk.
• Assist with the management of change control processes and communicate changes appropriately.

Operational Management

• Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.
• Ensure the enforcement of enterprise security documents.
• Participate in investigations into problematic activity and provide on-going communication with management.
• Perform regular security awareness training for employees to ensure consistently high levels of compliance with enterprise security documents.

Qualifications:

• College diploma or university degree in the field of computer science, cybersecurity, and/or 5 years’ equivalent work experience.
• One or more of the following certifications preferred:
  • GIAC Security Essentials Certification
  • Security +
  • ISACA Certified Information Security Manager (CISM)
  • Cisco CCNA
  • (ISC) 2 SCCP
  • (ISC) 2 CISSP
  • (ISC) 2 ISSAP
  • CAHIMS
  • CPHIMS
  • ITIL
  • PMP
• Familiarity with enterprise security document creation.
• Experience and familiarity with public speaking.
• Familiarity with developing Business Continuity Plans and Disaster Recovery Plans.
• Experience with HIPAA / HITECH regulatory standards and policy preferred.
• Working technical knowledge of Security Incident and Event Monitoring (SIEM) applications and technologies.
• Familiarity with IT best practices including ITIL, COBIT, etc.
• Familiarity with Log and Event management tools and technologies including correlation.
• Familiarity with Encryption technologies for data at rest, in-use and in-motion.
• Familiarity with enterprise security document creation.
• Experience and familiarity with public speaking.
• Familiarity with developing Business Continuity Plans and Disaster Recovery Plans.
• Experience with HIPAA / HITECH regulatory standards and policy preferred.
• Working technical knowledge of Security Incident and Event Monitoring (SIEM) applications and technologies.
• Familiarity with IT best practices including ITIL, COBIT, etc.
• Familiarity with Log and Event management tools and technologies including correlation.
• Familiarity with Encryption technologies for data at rest, in-use and in-motion.

Location: Brooks Rehabilitation Hospital at 3599 University Blvd South, Jacksonville, FL 32216

Hours: Monday - Friday, 40 hours per week with on-call availability and flexible work hours as projects and tasks demand

Compensation: Experience, education and tenure may be considered along with internal equity when job offers are extended.

Thriving in a culture that you can be proud of, you will also receive many employee benefits such as the following:

• Competitive Pay
• Comprehensive Benefits package
• Vacation/Paid Time Off
• Retirement Plan
• Employee Discounts
• Clinical Education and Professional Development Programs