•The Security Analyst position is a member of the team, who assists in the development, management and curation of the Security Enterprise Security Risk Management (GS-ESRM) Program. The Security Analyst supports the planning and execution of overarching security analysis endeavors. Demonstrated agility in working with rapidly developing project scope and plan. Responsible for supporting the development of the ESRM approach. Takes a data-driven approach to reach make recommendations that support and advance business objectives. Ensures the developed solutions satisfy the stated requirements and business objectives. Applies knowledge base of relevant systems/applications as it relates to workflow, process, and problem resolution and recommends improvements. Researches and analyzes operational procedures and methods and recommends changes for improvement in efficiency and effectiveness.

• Security threat identification, analyzing open source information and threat actor behavior. Within Security, the Security Analyst will collaborate with a wide-range of Mayo Clinic departments including: the Office of Information Security, Legal, Operational Risk Management, Office of Patient Experience and Human Resources. Job duties include researching, developing, and evaluating procedures for the aggregation, processing, analyzing, and reporting on potential Security activities. Support enterprise-wide security threat intelligence and countermeasure efforts. Review alerts, trends, or anomalies from data or in response to stakeholder inquiries using monitoring tools. Recommends the creation or implementation of Security policy, process, and procedures. Displays an ability to identify and define problems as well as generate and recommend potential solutions while involving the appropriate stakeholders in the process. Provides project management and analyst support for department projects. Consults Mayo Clinic leadership to provide unbiased and accurate information, analysis and recommendations to support and advance strategic and operational security initiatives. Conduct data triage of security events collected by the security records management system (D3/Resolver), third party open source intelligence providers, government open source intelligence partnerships, User Entity Behavioral Analytics (UEBA), and other client network and endpoint monitoring tools (infant protections system, video data analytics). Leverages data mining and integrates multiple sources of data to recommend strategic insights to best meet business needs.

• Provides open-source intelligence analysis (OSINT) on topics related to healthcare security including, but not limited to, cyber events, counterterrorism, counterintelligence, targeted and general threats of violence, critical infrastructure protection, supply chain risks, travel security and geopolitics.
• Provides collection research, analysis, and recommendations regarding liaison efforts with internal partners, external industry partners and external federal law enforcement elements to foster an environment of cooperation and sharing of information to develop future products better.
  Prepares finished analytic products, assessments, briefings and other written or oral products on current threats and trends based on the sophisticated collection, research, and analytic tradecraft of open-source information.
• Identifies gaps in available intelligence information and engages with other internal partners on strategies to meet intelligence requirements in support of Mayo Clinic goals.
• Employs Intelligence Community analytic standards and appropriate tradecraft, methodologies and techniques, and apply specialized subject matter expertise to prepare assessments of current threats and trends for consumers from senior executives to security managers.
• Familiarity with risk assessments and behavior threat assessments.

*This Position is Hybrid, individual must live within driving distance of Rochester campus

**This vacancy is not eligible for sponsorship / we will not sponsor or transfer visas for this position.

During the selection process, you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.

Bachelor’s degree with three years of business or security experience, Associates degree with five years of business or security experience. HS/GED with seven years of business or security experience.

Demonstrates knowledge of problem-solving methodologies, planning techniques, continuous improvement methods, project management methods, and analytical tools and methodologies required. Incumbent must have the ability to independently manage a varied workload of complex assignments with multiple priorities. Must have the desire to stay current with Global Security, information security, technology and healthcare trends as well as institutional changes. Certification in business or security field (project management, Agile, healthcare security) or ability to obtain within 2 years.

• The ability to obtain and maintain a security clearance is required