IT SR Application Analyst - Remote

Why Mayo Clinic Mayo Clinic is top-ranked in more specialties than any other care provider according to U.
S.
News & World Report.
As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans – to take care of you and your family, now and in the future.
And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.
You’ll thrive in an environment that supports innovation, is committed to ending racism and supporting diversity, equity and inclusion, and provides the resources you need to succeed.
Responsibilities This is a full-time remote position within the United States.
The Senior Application Analyst shall have a broad understanding of information security concepts along with how to apply and implement them.
As a member of the Security Management Audit Remediation Team, the candidate is responsible for overseeing and tracking adherence to the Vulnerability Management Policy for Enterprise Platform and Products Services division.
Candidate will have experience with Cloud computing, software development lifecycle, and remediation of vulnerabilities.
Candidate shall collaborate with the Office of Information Security on various security-related initiatives and projects, ensuring they are in line with Mayo Clinic's security policies.
They serve as a liaison between Information Security, Information Technology, business representatives, and various oversight committees, assisting with developing, communicating, and achieving Mayo’s Information Security goals.
The Senior Application Analyst is considered knowledgeable and skilled in industry standard information security concepts with particular focus on the NIST Cybersecurity Framework, or equivalent.
The Senior Application Analyst will be responsible for assisting in designing and supporting operational needs of the Security Management Audit Remediation Team.
This includes helping to develop efficient processes, drafting procedures and process flow diagrams, identifying key metrics, creating reports, and other duties as assigned.
The incumbent must have strong project management skills, a solid understanding of risks and controls, excellent time management abilities, and communication skills.
The incumbent must be comfortable with being assigned multiple tasks or activities, dealing with a diverse changing environment, decisive but always willing to ask questions, and able to work independently.
Furthermore, the incumbent must have a strong understanding of the business environment and the impact IT can have on the business environment.
Works on strategic projects with Project Owners, Product Oriented Development and Project Managers and will manage small- to mid-sized operational projects independently.
Works independently across multiple departments and divisions to accomplish goals.
The candidate will contribute to the tracking, analysis, reporting vulnerability data, as well as, providing continuous improvement of the operational processes carried out by the Security Management Audit Remediation Team.
Guides and advises less experienced application analysts and provides orientation and training for new employees.
Serves a primary role in the support of software programs or modules across multiple clinical and/or business functions.
Understands the business environment and the impact IT can have on the business environment.
Provides analysis and support for installed systems, as well as system implementation and integration projects, which require systems analysis, design, build, testing and implementation for specific modules or applications.
Functions as a liaison between clinical, business, and technical areas during the planning process and provides oversight throughout the project cycle.
Builds credibility and rapport with customers to understand their needs.
Researches requests to determine scope, size and impact.
Validates requirement information with the stakeholders to ensure completeness, correctness, and clarity.
Validates solutions to ensure it satisfies the stated requirements.
Maintains in-depth knowledge of existing systems and certification in the vended application.
Able to design, develop, or modify applications, algorithms, or rules via vendor tools or augmented tools developed within Mayo Clinic and are able to validate data integrity of changes introduced.
Works on strategic projects with a Project Manager and is able to manage small- to mid-sized operational projects independently.
Works independently across multiple departments and divisions in order to accomplish goals.
Creates test plans and evaluates current plans for improvement.
Guides and advises less experienced business analysts, and provides orientation and training for new employees.
Maintains knowledge of current and emerging technologies that directly affect enterprise processes.
Maintains awareness of overall enterprise architecture.
May be required to provide 24/7 on-call support.
Creates remediation reports and evaluates current plans for improvement.
This includes new and existing procedures, process flows, and other documentation supporting: Information Security Incident Response Alerting, remediation management and monitoring of vulnerabilities for supported teams Ensuring monitoring processes are in alignment with institutional policies, procedures, and standards Assisting and responding to internal and external assessment (e.
g.
, internal audits, HITRUST, DPS 2.
0+) Assisting in the facilitation of remediation efforts by application teams Quality assurance activities Drafting incident reports, internal memos, and presentations as requested During the selection process you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience.
During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding.
You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording.
The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.
Qualifications Bachelor’s Degree with 4 years’ experience OR Associate’s Degree with 6 years’ experience.
Vendor application certification may be required.
Pertinent fields of study and experience includes (but is not limited to) the following: Computer Science, Information Technology, Information Systems, information security, Systems Analysis, on-prem and cloud computing architecture, and patch management.
Vendor application certification may be required.
Preferred Qualifications: Knowledge of security principles, frameworks, standards, and best practices Extensive experience in on-prem and Cloud Computing and patch management and remediation strategies.
Experience developing, documenting, implementing, and testing processes and procedures.
Critical thinking with the ability to analyze complex data/information and provide actionable insights and solutions.
Comfortable in making decisions while seeking guidance when needed.
Proficient in Agile methodology and operational support.
Understanding of information management concepts and security concepts.
Proficiency with ServiceNow Vulnerability Response modules, RSA Archer GCR, Veracode, and other reporting tools.
Strong analytical, organizational change and project management skills.
Extensive experience with Microsoft applications including Word, Excel, PowerPoint, SharePoint, and Visio.
Demonstrated communication skills (both written and verbal) and ability to collaborate with diverse stakeholders across the organization.
Strong project management skills and ability to manage multiple tasks or activities simultaneously.
Proficiency with Azure Dev Ops, or equivalent tool, for work management, pipelines, and work tracking.
Authorization to work and remain in the United States, without necessity for Mayo Clinic sponsorship now, or in the future (for example, be a U.
S.
Citizen, national, or permanent resident, refugee, or asylee).
Also, Mayo Clinic does not participate in the F-1 STEM OPT extension program.
This position will accept applications until 04/14/2024.
This deadline may be extended if the necessary candidate pool is not met by this date.
Exemption Status Exempt Compensation Detail $88,774.
40 - $137,030.
40 / year Benefits Eligible Yes Schedule Full Time Hours/Pay Period 80 Schedule Details Monday - Friday; 8:00 am - 5:00 pm Weekend Schedule As needed International Assignment No Site Description Just as our reputation has spread beyond our Minnesota roots, so have our locations.
Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations.
Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives.
Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.
Affirmative Action and Equal Opportunity Employer As an Affirmative Action and Equal Opportunity Employer Mayo Clinic is committed to creating an inclusive environment that values the diversity of its employees and does not discriminate against any employee or candidate.
Women, minorities, veterans, people from the LGBTQ communities and people with disabilities are strongly encouraged to apply to join our teams.
Reasonable accommodations to access job openings or to apply for a job are available.
Recruiter Miranda Grabner