Security Train and Awareness Analyst

Job Description

Additional Information About the Role Looking for a remote position with occasional onsite visits. BJC is hiring a Security Train and Awareness Analyst. We need someone with top-notch communication, writing skills, and a solid grasp of Information Security. Must reside in the St. Louis area and be available for onsite work twice a month. Overview BJC HealthCare is one of the largest nonprofit health care organizations in the United States, delivering services to residents primarily in the greater St. Louis, southern Illinois and southeast Missouri regions. With net revenues of $6.3 billion and more than 30,000 employees, BJC serves patients and their families in urban, suburban and rural communities through its 14 hospitals and multiple community health locations. Services include inpatient and outpatient care, primary care, community health and wellness, workplace health, home health, community mental health, rehabilitation, long-term care and hospice. BJC is the largest provider of charity care, unreimbursed care and community benefits in the state of Missouri. BJC and its hospitals and health service organizations provide $785.9 million annually in community benefit. That includes $410.6 million in charity care and other financial assistance to patients to ensure medical care regardless of their ability to pay. In addition, BJC provides additional community benefits through commitments to research, emergency preparedness, regional health care safety net services, health literacy, community outreach and community health programs and regional economic development. BJC’s patients have access to the latest advances in medical science and technology through a formal affiliation between Barnes-Jewish Hospital and St. Louis Children’s Hospital with the renowned Washington University School of Medicine, which consistently ranks among the top medical schools in the country. IS Security Services serves as an independent, objective catalyst for implementing effective and efficient controls to protect BJC HealthCare (BJC) information resources through collaboration with customers. We provide value to our customers and the organization by : Ensuring compliance with internal policies and external regulations; evaluating information system and application controls; educating BJC employees and other strategic partners on information systems security practices and concepts; acting as a resource on security controls for new and existing information systems and applications; recovering mission critical applications and data vital to the organization and strategic partners; investigating practices not in compliance with established BJC Information Services security policies and standards. Preferred Qualifications Role Purpose Technology role responsible for developing the full range of professional, business or technical capabilities required by the organization developing learning and development strategies and policies identifying appropriate learning and development solutions, accreditations and qualifications selecting, tailoring and adopting skills and competency frameworks selecting and operating learning management systems administering, documenting, tracking, reporting on learning and development activities. Responsibilities Develops and implements an IT Security Awareness Communication plan that includes at a minimum, formal enterprise-wide articles, targeted email campaigns and internal social media posts. Provides ongoing written communication of upcoming IT Security initiatives and programs as well as articles about security current events that impact the BJC workforce. Manages the IT Security Website –internal to IT Security, internal to BJC and public facing for BJC patients and patient families. Develops and implements an enterprise-wide training program that includes, but is not limited to : New Hire OrientationSemi-Annual Security Awareness EventsAd-Hoc EventsPhishing CampaignsSecurity Awareness VideosOther May be part of an after-hours on-call rotation. Minimum Requirements Education Bachelor's Degree Experience 2-5 years Preferred Requirements Licenses & Certifications CIA Cert Information Privacy Prof CISA Cert Info Systems Manager CISSP Certified in Risk & IS Control Benefits and Legal Statement BJC Total Rewards At BJC we’re committed to providing you and your family with benefits and resources to help you manage your physical, emotional, social and financial well-being. Comprehensive medical, dental, vison, life insurance, and legal services available first day of the month after hire date Disability insurance

• paid for by BJC Pension Plan
• / 403(b) Plan funded by BJC 401(k) plan with BJC match Tuition Assistance available on first day BJC Institute for Learning and Development Health Care and Dependent Care Flexible Spending Accounts Paid Time Off benefit combines vacation, sick days, holidays and personal time Adoption assistance To learn more, go to www.bjctotalrewards.com / Benefits
• Not all benefits apply to all jobs The above information on this description has been designed to indicate the general nature and level of work performed by employees in this position. It is not designed to contain or be interpreted as an exhaustive list of all responsibilities, duties and qualifications required of employees assigned to this job. Equal Opportunity Employer Qualifications

Role Purpose Technology role responsible for developing the full range of professional, business or technical capabilities required by the organization developing learning and development strategies and policies identifying appropriate learning and development solutions, accreditations and qualifications selecting, tailoring and adopting skills and competency frameworks selecting and operating learning management systems administering, documenting, tracking, reporting on learning and development activities. Responsibilities Develops and implements an IT Security Awareness Communication plan that includes at a minimum, formal enterprise-wide articles, targeted email campaigns and internal social media posts. Provides ongoing written communication of upcoming IT Security initiatives and programs as well as articles about security current events that impact the BJC workforce. Manages the IT Security Website –internal to IT Security, internal to BJC and public facing for BJC patients and patient families. Develops and implements an enterprise-wide training program that includes, but is not limited to : New Hire OrientationSemi-Annual Security Awareness EventsAd-Hoc EventsPhishing CampaignsSecurity Awareness VideosOther May be part of an after-hours on-call rotation. Minimum Requirements Education Bachelor's Degree Experience 2-5 years Preferred Requirements Licenses & Certifications CIA Cert Information Privacy Prof CISA Cert Info Systems Manager CISSP Certified in Risk & IS Control

Responsibilities

BJC HealthCare is one of the largest nonprofit health care organizations in the United States, delivering services to residents primarily in the greater St. Louis, southern Illinois and southeast Missouri regions. With net revenues of $6.3 billion and more than 30,000 employees, BJC serves patients and their families in urban, suburban and rural communities through its 14 hospitals and multiple community health locations. Services include inpatient and outpatient care, primary care, community health and wellness, workplace health, home health, community mental health, rehabilitation, long-term care and hospice. BJC is the largest provider of charity care, unreimbursed care and community benefits in the state of Missouri. BJC and its hospitals and health service organizations provide $785.9 million annually in community benefit. That includes $410.6 million in charity care and other financial assistance to patients to ensure medical care regardless of their ability to pay. In addition, BJC provides additional community benefits through commitments to research, emergency preparedness, regional health care safety net services, health literacy, community outreach and community health programs and regional economic development. BJC’s patients have access to the latest advances in medical science and technology through a formal affiliation between Barnes-Jewish Hospital and St. Louis Children’s Hospital with the renowned Washington University School of Medicine, which consistently ranks among the top medical schools in the country. IS Security Services serves as an independent, objective catalyst for implementing effective and efficient controls to protect BJC HealthCare (BJC) information resources through collaboration with customers. We provide value to our customers and the organization by : Ensuring compliance with internal policies and external regulations; evaluating information system and application controls; educating BJC employees and other strategic partners on information systems security practices and concepts; acting as a resource on security controls for new and existing information systems and applications; recovering mission critical applications and data vital to the organization and strategic partners; investigating practices not in compliance with established BJC Information Services security policies and standards.