Forefront Telecare, Inc. is a tech-enabled healthcare company and a recognized national leader in behavioral telehealth with a provider network of psychiatrists, psychiatric nurse practitioners, and other behavioral health professionals serving rural America. We have a nationwide presence and a stellar reputation with the clients and patients we serve.

As a pioneer in behavioral telehealth, we had to create many of the technical, logistical, clinical, reimbursement and business protocols that we use in our operations today. That spirit of creativity and our ability to innovate have been tremendously important in our ability to design and customize solutions for various kinds of facilities and practices, which present unique conditions and challenges.

Reporting to the CIO, the Senior Information Security Analyst is responsible for ensuring that appropriate remediation measures for minimizing cybersecurity risks are in place. The Senior Security Analyst will work with IT and non-IT teams to make certain procedural security controls are established and maintained within the organization that comply with a variety of security requirements and industry best practices. The position works closely with the Information Security Officer, IT leadership, and team members to implement and maintain security and compliance across Forefront Telecare. The analyst will also work to continually monitor compliance aspects, assisting in risk assessments, monitoring, and security projects to support effective implementation and support. Another area of focus will be in assisting in the Vulnerability Management Program (review, analyze, and reporting) as well as oversight on outcomes of penetration tests and vulnerability assessments with a view into enhancing and maintaining a digital security/cybersecurity risk posture. The analyst will also work to follow up with applicable Risk Owners to ensure vulnerability and other findings are mitigated.

Essential Job Functions:

• Validate security policies and regulatory requirements are met across the business, ensuring protection from domestic or international security threats.
• Evaluates security controls to ensure effectiveness and compliance with the information security program and regulatory requirements.
• Manages security control remediation efforts and supports internal and external information security related audits.
• Audit/collect security control implementation audit logs, penetration testing results, and vulnerability scan results.
• Work with control owners and operators to ensure quality, consistency and operability of new and existing controls.
• Support the review of IT tools, control designs, and control remediation planning efforts.
• Manage multiple concurrent projects with quality and in accordance with a documented schedule that meets or exceeds customer expectations.
• Provide guidance and assist with identity management and governance frameworks (SSO, AD, etc.)
• Review pen test findings, facilitate the remediation of control gaps, and escalate possible critical issues to senior management within IT.
• Foster an innovative and inclusive team-oriented” culture of security”.
• Other duties and projects as assigned.

Knowledge, Skills and Abilities:

• Able to act independently.
• Experience in writing technical documentation and solid knowledge of Cloud and Security concepts. Pro-active, strategic approach to problem solving and controls execution.

• Knowledge of current technological trends and developments in the area HIPPA, HITRUST and healthcare data security required.
• Basic security concepts such as virus protection, threat management, encryption of data at rest and in motion are required.
• Preferred candidates will possess good analytical, technical, problem-solving, and exceptional organizational skills.
• Nice-to-have experience:
• Ability to work in a high growth/fast paced environment.
• Working knowledge of a HIPAA regulations
• Passion for improving the lives of people with behavioral health conditions, especially the senior population.

o Working knowledge of networking, cloud computing, and security concepts for both.

o Mobile Device Management/BYOD tools and techniques

o Data Loss Prevention (DLP) and Security Information and Event Management systems (SIEM)

• Strong desire to learn & grow with the organization.

Education and Experience:

• Bachelor’s Degree in Information Security, Computer Science, Information Systems or other related field.
• 3-5+ years combined IT and security related work experience, preferably in healthcare.
• CISSP, HCISSP, CCSFP or other security certifications would be beneficial but not required.
• Healthcare industry experience preferred.
• Telehealth experience is highly desirable but not required

Forefront Telecare is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Forefront Telecare is an E-Verify company.