The Senior Information Security Analyst is an experienced cybersecurity professional responsible for leading complex security initiatives, providing enterprise risk insight, and advancing the organization's information security program. This role operates with a high degree of autonomy and accountability across multiple security domains. Senior Analysts serve as trusted advisors to business, clinical, and technology leaders, translating cybersecurity and risk concepts into clear, actionable guidance. They lead security assessments, influence control design and risk treatment decisions, and contribute to the ongoing maturity of the security program in alignment with organizational objectives, regulatory requirements, and industry frameworks such as NIST and CISA. This position requires strong technical and risk expertise, effective communication skills, and the ability to mentor analysts, lead cross functional efforts, and drive continuous improvement. This role serves as a senior analyst within the Infrastructure Protection - Network Security (IP-NS) team, supporting Vendor Remote Access (VRA) onboarding operations — including intake, provisioning, access validation, and customer communication for vendors and business partners using approved remote access tools. The successful candidate must bring strong customer service skills to consistently deliver a positive experience for internal and external stakeholders, paired with strong analytical and security skills. The role requires someone who is comfortable leading technical discussions and aligning technical requirements to policy. A self-starter mindset and a high level of personal organization are essential — this role balances competing priorities, external-facing service requests, and operational support with an on-call rotation. Ability to operate effectively in a hybrid work environment, including participation in on-site work-related events, team collaboration sessions, and key organizational activities as required. This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic

DOES NOT

participate in the

F-1 STEM OPT

extension program. Master's degree in applicable field plus four (4) years of relevant experience preferred OR a Bachelor's degree in applicable field plus five (5) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field. One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.