About City of Hope
City of Hope is an independent biomedical research and treatment organization for cancer, diabetes and other life-threatening diseases.
Founded in 1913, City of Hope is a leader in bone marrow transplantation and immunotherapy such as CAR T cell therapy. City of Hope’s translational research and personalized treatment protocols advance care throughout the world. Human synthetic insulin, monoclonal antibodies and numerous breakthrough cancer drugs are based on technology developed at the institution.  AccessHope™, a subsidiary launched in 2019 serves employers and their health care partners by providing access to City of Hope’s specialized cancer expertise.
A National Cancer Institute-designated comprehensive cancer center and a founding member of the National Comprehensive Cancer Network, City of Hope is ranked among the nation’s “Best Hospitals” in cancer by U.S. News & World Report and received Magnet Recognition from the American Nurses Credentialing Center. Its main campus is located near Los Angeles, with additional locations throughout Southern California and in Arizona.

City of Hope’s commitment to Diversity, Equity and Inclusion
We believe diversity, equity and inclusion is key in serving our mission to provide compassionate patient care, drive innovative discovery, and advance vital education focused on eliminating cancer and diabetes in all of our communities.  Our commitment to Diversity, Equity and Inclusion ensures we bring the full range of skills, perspectives, cultural backgrounds and experiences to our work -- and that our teams align with the people we serve in order to build trust and understanding.  We are dedicated to fostering a community that embraces diversity - in ideas, backgrounds and perspectives; this is reflected in our work and represented in our people.

** This is a Fully Remote Opportunity. You may sit at any of the 48 States. Must be willing to work Pacific Hours **

Position Summary
The Cyber Security Analyst supports the ISO in evolving the confidentiality, integrity, and availability of the information assets related to City of Hope business and information systems.  The incumbent in this role participates in the development of the Cyber Security program by contributing to the development of an enterprise wide security risk program, policies and standards, vulnerability life-cycle management and remediation, evaluation of new security technologies, and contributes to security incident and event management.  The incumbent supports and assists with coordination and implementation of all process and technical aspects of the Cyber Security Program.

Key Responsibilities include:

• Develop and publish and risk analysis and assessment protocols for Cyber Security risk management purposes.
• Work directly with business and technical teams to implement risk-related activities including accessing, planning, testing, reporting and recommending appropriate remediation measures. 
• Perform Cyber Security evaluations for information technology projects to ensure compliance with policies and regulatory requirements.
• Contributes to the forensic analysis of security violations. 
• Conduct periodic self-assessments and gap analysis related to Cyber Security controls and manage the remediation to correct the gaps. 
• Participate in verifying network, wireless and firewall security systems by conducting reviews and policy assessments.  
• Provide analysis to support and maintain Cyber Security related technologies and architectures, such as, but not limited to, IDS (intrusion detection systems), VPNs (virtual private networks), data loss prevention tools, VLANs, firewall architectures, proxy servers, internet access policy servers, authentication systems, and content screening servers.
• Ensures compliance to regulations, business requirements and City of Hope policies, standards, and procedures.   
• Design, document, and support network security design changes including wireless network. 
• Oversee and monitor risk mitigation and coordination of policies, standards and controls with the ISO and Compliance Officer.
• Perform data security event correlation between various systems.
• Supports the vulnerability life cycle management.
• Provide incident response functions when appropriate and coordinate activities with other information technology teams.
• Assist with the evaluation of new Cyber Security technologies with recommendations to management on the different products.  
• Review alerts and data collected from data security systems on a daily basis and report findings.  Contribute to the development of Cyber Security policies and procedures designed to meet the changing needs of the City of Hope.  Prepare documentation to support the development of Cyber Security policies, standards, guidelines, procedures and awareness training. 
• Performs special projects as assigned by the ISO.
• Internal Contacts:  Across all ITS departments, COH business, research and clinical areas, and VP/Director/Managers.
• External Contacts: Software/hardware vendors.
• Evaluate current information technology systems for Cyber Security gaps, identify, and implement remediation solutions.
• Performs other related duties as assigned or requested.

Basic education, experience and skills required for consideration:

• Bachelor’s Degree (or 2-year degree with work experience and a Bachelor’s degree in progress) Experience may substitute for the minimum educational requirements.
• Two or more years in a technology related field and/or two years in Cyber Security specific experience.  Hospital/healthcare industry experience is desirable, but not required.
• Working knowledge of Cyber Security tools, practices, policies and processes in a multi-vendor environment with an emphasis on risk analysis, risk assessment and risk management.  

Preferred education experience and skills:

• GSEC - GIAC’s Security Essentials Certification (or within 12 months of hire) 
• Any other certification is highly desirable: 
• CISA – Certified Information Systems Auditor
• GIAC:

1.         GISP – Cyber Security Professional, 
2.         GSEC – Security Essentials Certification, 
3.         SSCP- Systems Security Certified Practitioner, 
4.         GISF- Cyber Security Forensics, 

• CBCP - Certified in Business Continuity Planning      

Additional Information:

• As a condition of employment, City of Hope requires staff to comply with all state and federal vaccination mandates.

City of Hope is committed to creating a diverse environment and is proud to be an equal opportunity employer.  All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with disability.
 #LI-CL