IS Security Analyst II

The Cybersecurity Analyst II is a mid-level practitioner who safeguards MCW systems and data while enabling research. The role specializes in compliance, risk management, incident response, and program coordination. It translates complex requirements (HIPAA Security Rule, CMMC, NIST SP 800-171, NIST SP 800-53, and NIH/dbGaP controlled-access genomic data expectations) into practical, auditable controls across enterprise and research environments. In partnership with the Office of Compliance and Risk and the Office of Research, the analyst co-designs pre-award guidance and post-award monitoring to ensure investigators understand and meet obligations related to ePHI, CUI, and controlled-access data throughout the award's life. This role does not own engineering, code development, or system/tool administration; it coordinates with those teams to drive outcomes.

• Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.

• Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security.

• Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents.

• Investigates and resolves security incidents and recommends enhancements to improve security.

• Develops techniques and procedures for conducting IS security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security information systems.

• Monitors, evaluates, and maintains systems and procedures to protect the data systems and databases from unauthorized users.

• Researches, recommends, and implements changes to procedures and systems to enhance data systems security in accordance with industry standards. Prepare and present findings to leadership.

• Other duties as assigned.

• Alert triage
• Incident documentation
• Risk Assessment
• Strong collaboration with Information Technology Services colleagues
• Effective partnership with colleagues from Compliance and Risk Management, the Office of Research, the Office of General Counsel, and other applicable departments.
• Is respectful, honest, and demonstrates integrity and ethics.
• Listens effectively, shares ideas and information openly, and facilitates relationship building by establishing trust.
• Strong analytical thinker.
• Possesses initiative, good judgment, and the ability to problem solve.
• Possesses strong business acumen with proven experience in thinking strategically and implementing tactically.
• Handles demanding workloads to meet objectives.
• Is customer-focused, service-oriented, and has effectively affected change.
• Makes tough decisions when needed.
• Can make decisions under conditions of high uncertainty/ambiguity.
• Stays current with cutting-edge developments in technology and the industry.
• Ability to maintain confidences.
• Ability to perform effectively in a stressful environment.
• Demonstrated leadership ability.
• Ability to work and communicate successfully with all levels of internal and external contacts.
• Ability to communicate orally and in writing clearly and logically.
• Ability to foster and maintain solid working relationships.
• Ability to effectively plan and organize projects impacting the work of others.