Cybersecurity Anlst Sr

Senior Cybersecurity Analyst IT Cybersecurity

Full Time 80 Hours Per Pay Period Day Shift

Covenant Health Overview:

Covenant Health is the regions top-performing healthcare network with 10hospitalsoutpatient and specialtyservicesandCovenant Medical Group our areas fastest-growing physician practice division. Headquartered in Knoxville Covenant Health is a community-owned integrated healthcare delivery system and the areas largest employer. Our more than 11000 employees volunteers and 1500 affiliated physicians are dedicated to improving the quality of life for the more than two million patients and families we serve every year. Covenant Health is the only healthcare system in East Tennessee to be named a Forbes Best Employer seven times.

Position Summary:

Under minimal supervision the Cybersecurity Analyst Sr. is responsible for protecting Covenant Healths information systems and data assets from cyber threats. This role involves monitoring analyzing and responding to security incidents managing cybersecurity tools and platforms and ensuring compliance with healthcare regulations such as HIPAA and HITECH while adhering to frameworks such as NIST and HITRUST. The analyst will work closely with IT infrastructure application teams and clinical departments to implement security best practices and maintain a secure environment across the enterprise.

Recruiter: Suzie McGuinn

• Monitor and respond to security alerts and incidents using SIEM and EDR platforms.
• Conduct vulnerability assessments and coordinate remediation efforts with system and network teams.
• Develop and maintain security policies procedures and standards aligned with NIST and CIS frameworks.
• Lead investigations of security breaches and coordinate incident response activities.
• Perform regular audits of access controls user permissions and privileged accounts.
• Collaborate with infrastructure and application teams to ensure secure system configurations and patch management.
• Support compliance initiatives including HIPAA HITECH PCI-DSS and other regulatory requirements.
• Conduct risk assessments and recommend mitigation strategies for new technologies and projects.
• Provide cybersecurity awareness training and guidance to staff across the organization.
• Participate in interdisciplinary IT projects to ensure security is embedded throughout the system lifecycle.
• Maintain current knowledge of emerging threats vulnerabilities and cybersecurity technologies.
• Assist in the design and implementation of security architecture including firewalls VPNs and identity management solutions.
• Document and report on security metrics incidents and risk posture to IT leadership.
• Implement continuous security monitoring and threat intelligence analysis.
• Support forensic investigations and digital evidence collection.
• Ensure secure cloud adoption and configuration (Azure AWS Microsoft 365).
• Research prototype and recommend new security tools processes or capabilities that will enhance Covenants controls
• Collaborate with legal and compliance teams during audits and regulatory reviews.
• Follows policies procedures and safety standards. Completes required education assignments annually. Works toward achieving goals and objectives and participates in quality improvement initiatives as requested.
• Performs other duties as assigned.

Minimum Education:

Bachelors degree in Cybersecurity Information Technology Computer Science or a related field. Equivalent work experience and certifications (e.g. Security CySA GSEC CISSP CISM CEH GIAC) will be considered.

Minimum Experience:

Seven (7) years of experience in IT with at least five (5) years focused on cybersecurity in a large complex environment.

Licensure Requirement:

None.