Job Description

The Information Security Analyst serves as a liaison between technology and the business including various oversight committees. The Information Security Analyst understands the following: Industry standard information security concepts, Organizational Change Management, Project Management and Business Analysis. The Information Security Analyst has basic experience and is building skills in: Integrating multiple disciplines (e.g., business / systems process analysis, data analysis, data informatics, risk management, regulatory requirements, and technology) for strategic and operational planning. Applying problem-solving methods, planning techniques, continuous improvement, project management, and analytical tools and methodologies to achieve Mayo goals. Conducting information security assessments. Collaborating with others to address security questions and responding to customer inquiries. Ensuring appropriate treatment of cyber security risk and monitoring compliance to Mayo's Information Security policies, processes and procedures. Creating, supporting, and evaluating security prototypes. Administering Information Security processes and tools that enable the organization to operate effectively and efficiently. Creating, coordinating, conducting and/or evaluating training courses within pertinent subject domain. Drafting policies, processes and procedures. •Managing a varied workload of projects with multiple priorities. Staying current on information security, technology and healthcare trends and institutional changes. Developing interpersonal skills to include presentation, negotiation, influencing, team facilitation and written communications. Effectively managing time. Additional qualifications may apply (see additional experience and/or qualifications)

Occasional travel to Rochester may be required based on departmental needs.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Master's degree in applicable field and 2 years’ experience or Bachelor’s degree in applicable field and 4 years’ experience. Pertinent fields of study and experience includes (but is not limited to) the following: information security, operational analysis, process change, electronic systems implementation, leadership, systems analysis and project management with broad-based key enterprise initiatives.

Preferred Qualifications:

The candidate must be self-driven and highly accountable, capable of working independently and prioritizing tasks effectively. The ability to collaboratively work across various IAM teams is a must.

Demonstrated expertise in querying and analyzing Identity and Access Management (IAM) source data across enterprise platforms, including Active Directory, Entra ID, Azure AD B2C, Prisma, Silverfort, CyberArk, and SailPoint. Proven ability to collaborate effectively with the Cyber Security Operations Center (CSOC) team to support initial investigations, including event triage and incident assessment. Experience identifying anomalous identity behavior, suspicious authentication patterns, or privilege misuse. Advanced proficiency in BigQuery, supported by strong SQL capabilities and a comprehensive understanding of cloud database architectures, along with best practices for interacting with and extracting data from modern, distributed cloud environments. Experience with tools, such as BQ, Snowflake, Redshift, Databricks, and Clickhouse is preferred.