The Senior Information Security Analyst is an experienced cybersecurity professional responsible for leading complex security initiatives, providing enterprise risk insight, and advancing the organization’s information security program. This role operates with a high degree of autonomy and accountability across multiple security domains. Senior Analysts serve as trusted advisors to business, clinical, and technology leaders, translating cybersecurity and risk concepts into clear, actionable guidance. They lead security assessments, influence control design and risk treatment decisions, and contribute to the ongoing maturity of the security program in alignment with organizational objectives, regulatory requirements, and industry frameworks such as NIST and CISA. This position requires strong technical and risk expertise, effective communication skills, and the ability to mentor analysts, lead cross functional efforts, and drive continuous improvement.
This role serves as a senior analyst within the Infrastructure Protection – Network Security (IP-NS) team, supporting Vendor Remote Access (VRA) onboarding operations — including intake, provisioning, access validation, and customer communication for vendors and business partners using approved remote access tools. The successful candidate must bring strong customer service skills to consistently deliver a positive experience for internal and external stakeholders, paired with strong analytical and security skills. The role requires someone who is comfortable leading technical discussions and aligning technical requirements to policy. A self-starter mindset and a high level of personal organization are essential — this role balances competing priorities, external-facing service requests, and operational support with an on-call rotation. Ability to operate effectively in a hybrid work environment, including participation in on-site work-related events, team collaboration sessions, and key organizational activities as required.
This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.
Master’s degree in applicable field plus four (4) years of relevant experience preferred OR a Bachelor’s degree in applicable field plus five (5) years of relevant experience.
Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.
One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.
Mayo Clinic has expanded and changed in many ways, but our values remain true to the vision of our founders. Our primary value – The needs of the patient come first – guides our plans and decisions as we create the future of health care. Join us and you'll find a culture of teamwork, professionalism and mutual respect, and most importantly, a life-changing career.
Mayo Clinic was founded in Rochester, Minnesota by brothers Dr. William James Mayo and Dr. Charles Horace Mayo. More than 100 years later, their vision continues to evolve around a single guiding value: "The needs of the patient come first." Today we are the largest integrated, not for-profit medical group practice in the world.
We are recognized for high-quality patient care more than any other academic medical center in the nation. These endorsements are very gratifying, but also humbling. They remind us of the tradition that has been entrusted to each one of us, and the legacy of excellence that we uphold every day.
