• Sr. Cloud Security Analysts for various and unanticipated worksites in the U.S (HQ: Chicago, IL).
• Responsible for providing security for cloud-based digital platforms and plays an integral role in protecting NMHC's data.
• Lead the Data Loss Prevention (DLP) program, including the development of SOPs.
• Collaborates with teams and stakeholders to effectively implement and manage data security measures within the organization, including compliance, audit and risk management, HR, Legal and Privacy issues.
• Perform security event monitoring, evaluate and report on information security that supports risk posture.
• Investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.
• Manages customer relationships and follows issues through to closure.
• Develops reports, monitoring dashboards, workflows, and metrics within cloud and hybrid environments.
• Define and manage processes and tools used to prevent data exfiltration, mitigate the effects of exfiltrated data, and ensure the privacy and integrity of sensitive information.
• Develops project plans to direct technology activities.
• Reviews technology projects, analyzes business requirements, recommends system changes, writes technical specifications and implements system and system changes to address changing application requirements.
• Establishes and enforces standards and procedures in accordance with NMHC’s security policies.
• Provides technical leadership, mentoring and support for computing systems security resources.
• Manage the technical relationship with the vendor.

Technical Environment:

• Global security standards and frameworks (NIST, HIPAA)

• cyber threat intelligence

• network protocols and topologies

• monitor and administer endpoint detection and response

• security controls (proxies, Firewall and packet analyzers)

• threat protection in cloud and hybrid

• Incident response

• SIEM

• Email security gateway

• Threat and Vulnerability management

• Python

• scripting

• SQL

• Windows & Linux/UNIX administration

• various major security vendors

• ServiceNow ITOM

• Orchestrator

• Cloud Management

• Cost Management

• Change Management

• Asset Management.

• LMT68894N

Required qualifications:

• Bachelor’s degree in Computer Science, IT, or a related field plus five years of progressive experience in cyber security required.

• Required skills: 3 years with: network protocols and topologies; proxies, Firewall, packet analyzers; Incident response; monitor and administer endpoint detection and response; Windows administration; Experience must include: at least 2 major security vendors; Python/scripting; email security; SIEM; security controls and threat protection in cloud and hybrid; cyber threat intelligence.

• Education or experience: Linux/UNIX; Threat and Vulnerability Management, Security standards/controls (NIST, HIPAA).

Preferred qualifications:

• May work remote with ability to commute to Chicago office.

• Background check and drug screening required.

Northwestern Medicine is an affirmative action/equal opportunity employer and does not discriminate in hiring or employment on the basis of age, sex, race, color, religion, national origin, gender identity, veteran status, disability, sexual orientation or any other protected status.