Responsibilities/Job Description:
The Principal Cybersecurity Analyst for Business Continuity Management will lead a team of analysts dedicated to supporting operational departments in the creation, implementation, and maintenance of business continuity plans and related initiatives. This role requires a strategic thinker with deep expertise in disaster preparedness and emergency management, particularly within large healthcare organizations. The analyst will collaborate closely with Enterprise Resiliency leadership and departmental stakeholders to advance the organization’s business continuity capabilities within defined timelines. They will also be responsible for optimizing processes, enhancing reporting frameworks, and evolving the business continuity management system to increase organizational value and drive widespread adoption. The ideal candidate will bring substantial experience in business continuity and emergency management, with a proven track record of building resilient programs that protect organizations during and after disruptive events. Strong leadership, along with exceptional written and verbal communication skills, is essential for success in this role.
Lead tactical and strategic teams to define, collect, analyze and prioritize security requirements based on evolving technical and security needs for the company, indicators of compromise, indicators of anomalous behavior and/or external threat indicators
Participate in industry forums and relevant technical briefings to understand advancements in Cybersecurity and Risk Management areas, compliance, governance and business continuity management capabilities.
Apply understanding of various domains of security including authentication, authorization, network security, data, system device and Operating Systems, coding principles, development methodologies, web/mobile applications, use of public and private networks, devices and applications hosted in public/private/hybrid cloud environments
Assist in design, implement, maintain and support current and future complex information security technologies, processes and procedures. Lead the design and development of security controls that ensure the safety of information assets and protect from unauthorized access or intentional destruction.
May lead complex projects related to security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies. Assure the implementation of appropriate security configurations or re-configurations and work with appropriate teams to execute them as required.
Additional Job Responsibilities:
-
Program Strategy & Evolution: Lead efforts to support, maintain, and continuously improve the enterprise resiliency program and its core strategies.
-
Team Leadership & Mentorship: Provide guidance and oversight to junior analysts, fostering skill development and effective contributions to the resiliency program.
-
Cross-Department Collaboration: Partner with department leaders to promote understanding of enterprise resiliency principles and their implementation.
-
Lifecycle Coordination: Organize and facilitate resiliency lifecycle activities, preparing departments for successful Business Continuity (BC) Plan creation.
-
Cybersecurity & Emergency Integration: Collaborate with cybersecurity and emergency management teams to align BC plans within the broader resiliency framework.
-
Performance Measurement: Support the creation of relevant metrics and KPIs to track the effectiveness and progress of resiliency initiatives.
-
Continuous Improvement: Analyze operational feedback and industry trends to propose enhancements that elevate the resilience strategy.
-
Industry Monitoring & Compliance: Stay informed on best practices, emerging threats, and regulatory shifts to ensure program adaptability and compliance.
-
Workflow Optimization: Participate in regular team meetings to identify process inefficiencies and contribute to workflow improvements.
-
On-Site Support: Travel to operational sites to assist leaders with hands-on plan development and implementation guidance.
-
Bachelor’s degree in Technology, Liberal Arts, Engineering or related disciplines or combination of relevant experience/education.
5+ years of experience in two or more areas of IT Security Risk and Compliance management areas - Risk Management, Disaster Recovery, BCP, Governance, Audit, Security Operations, Policy & Awareness, Security Training & Threat modeling
-
Experience building and executing business continuity programs.
-
Experience deploying and/or managing tools, methods and processes associated with enterprise resiliency/business continuity.
-
Previous experience leading teams.
-
Understanding and experience implementing disaster recovery planning or emergency management practices.
Excellent understanding of fundamentals of IT systems, frameworks, development methodologies, network, firewalls, communication layers, devices/end points, computing environment
Deeper understanding of Threats, Vulnerabilities, Risk, Cybersecurity frameworks, policies and Cybersecurity standards
Language & Communication Skills
Bachelor’s degree or higher in Computer Science, Computer Engineering, Digital Forensics, Cybersecurity and/or related technical discipline.
-
Prior work experience within healthcare organizations
License/Certification/Registration
Industry specific certifications – Security+, CISSP, CISM, CISA, CBCP ABCP CBCI, CEM, or equivalent business continuity certification
Qualifications:
$124176.00-$175323.20 Annual
