Find & Apply For Cyber / Information Security Engineer / Analyst Jobs in Forest Hill, Maryland

Benefits:

401(k) Bonus based on performance Dental insurance Health insurance Paid time off Job Summary Peace Healthcare Services is seeking an experienced IT Administration Services & Cybersecurity Specialist to oversee the organization's information technology operations, cybersecurity, compliance, and technology-related risk management. This position will provide independent IT and cybersecurity oversight, with a particular focus on protecting sensitive healthcare information, maintaining HIPAA compliance, supporting BHA and CARF re-accreditation requirements, monitoring IT controls, and identifying and correcting technology and compliance deficiencies. The successful candidate will work collaboratively with leadership and staff while maintaining appropriate independence between IT/security functions and Finance. Key Responsibilities Manage day-to-day IT administration, including systems, accounts, devices, applications, and user access. Establish and maintain appropriate user-access controls, permissions, and account-management procedures. Develop, implement, and monitor cybersecurity policies, procedures, and security practices. Identify cybersecurity risks and vulnerabilities and recommend appropriate corrective actions. Support cybersecurity incident identification, response, documentation, and follow-up. Maintain safeguards to protect Protected Health Information (PHI) and other confidential organizational information. Monitor and support compliance with HIPAA and applicable privacy and security requirements. Conduct or coordinate IT compliance monitoring, internal reviews, and security audits. Identify IT, cybersecurity, and compliance deficiencies and assist leadership with developing corrective action plans. Maintain appropriate IT documentation, security procedures, reports, and records. Support BHA and CARF re-accreditation preparation, including technology-related documentation, evidence, policies, and corrective actions. Assist with preparation for internal and external compliance reviews and audits. Monitor technology vendors and third-party IT services to ensure appropriate security and compliance standards are maintained. Support Microsoft 365, EHR, network, endpoint, and other organizational technology systems. Develop and maintain business continuity, backup, and disaster recovery procedures. Assist with testing and updating disaster recovery and business continuity plans. Provide cybersecurity and technology training and education to employees. Promote staff awareness of phishing, password security, access controls, confidentiality, and other cybersecurity practices. Provide regular reports to leadership regarding IT operations, cybersecurity risks, compliance concerns, and recommended improvements. Maintain appropriate separation and independent oversight of IT/security functions from Finance. Perform other IT, cybersecurity, and compliance-related duties as assigned. Required Qualifications Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field or equivalent combination of education and relevant experience. Demonstrated experience in IT administration and/or cybersecurity. Knowledge of cybersecurity principles, access controls, risk management, and incident response. Knowledge of HIPAA privacy and security requirements and protection of PHI. Experience with IT compliance monitoring, auditing, and corrective action processes. Ability to manage user accounts, permissions, systems, and technology resources. Strong documentation, analytical, problem-solving, and communication skills. Ability to maintain confidentiality and handle sensitive healthcare and employee information. Ability to work independently while collaborating effectively with organizational leadership and staff. Preferred Qualifications Experience working in a healthcare, behavioral health, or other regulated environment. Knowledge of CARF accreditation and re-accreditation requirements. Experience conducting HIPAA security risk assessments. Experience with Microsoft 365 administration and security. Experience working with electronic health records (EHR) and healthcare technology systems. Experience supporting healthcare compliance audits. Relevant cybersecurity or IT certifications such as CompTIA Security+, CISSP, CISA, or CISM. Experience developing or maintaining business continuity and disaster recovery plans.