Sr. IT Security Analyst – Onsite @ Omnicell

Dallas, TX, United States

Reporting to Director, Information Security Architecture, the Business Information Security Officer (BISO) is responsible for liaising between the Omnicell Information Security Team and their line of business constituency helping the business understand and implement security policies and processes while helping the Information Security Team understand the impact of those policies upon the business unit.

The BISO participates in information security governance process as a member of the company’s Information Security committee and by providing business subject matter expertise in the development of new policies or revision to existing policies. They are also responsible for communicating the policies of their constituency to drive business unit awareness and compliance and monitoring their adoption across the business. Responsibilities include:

Responsibilities:

Provide motivation to business unites to adopt cybersecurity controls and engage with internal and external stakeholders to educate on control requirements and communicate impact of policy changes.

Help to align information security priorities and initiatives with the business’s strategic roadmap.

Support the Information Technology Risk Program by working with the business unit to document exception requests for situations where the policy cannot be implemented.

Advise business unit management on risk issues related to information security and recommend actions aligned with Omnicell’s risk management, compliance, and information security programs.

Drive remediation or mitigation of vulnerabilities, security audit findings, penetration tests and other identified security risks.

Define and report key performance indicators (KPIs) and metrics aligned with business initiative and deliver them to non-technical audiences in a way they are understood.

Contribute to company security awareness activities and materials.

Communicate plans for emerging technology adoption to the Information Security team proactively.

Participate in cyber security incident response teams when needed.

Required Skills and Knowledge:

Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.

Knowledge of security and control frameworks, such as NIST, ISO, PCI, HITRUST, and HIPAA Security with applicable knowledge of best practices.

Demonstrable experience with understanding business focus and processes and ability to inject cybersecurity into the business through teamwork and influence.

Demonstrable experience with the ability to work effectively with diverse teams and varying personalities and adapt management style to effectively reach mutually beneficial outcomes.

Strong Risk management and remediation skills.

Basic Qualifications:

Bachelor’s Degree plus 8 years’ Information Technology experience OR

HS Diploma/GED plus 10 years information technology experience.

5 years management experience in IT related applications, processes, and procedures

Strong written and verbal communication skills across all levels of the organization

Preferred:

Certifications: CISSP, CISA, or CISM

Work Conditions:

Flexibility to be available occasionally outside of regular business hours/weekends

Occasional travel up to once per quarter.

Reporting to Director, Information Security Architecture, the Business Information Security Officer (BISO) is responsible for liaising between the Omnicell Information Security Team and their line of business constituency helping the business understand and implement security policies and processes while helping the Information Security Team understand the impact of those policies upon the business unit.

The BISO participates in information security governance process as a member of the company’s Information Security committee and by providing business subject matter expertise in the development of new policies or revision to existing policies. They are also responsible for communicating the policies of their constituency to drive business unit awareness and compliance and monitoring their adoption across the business. Responsibilities include:

Responsibilities:

Provide motivation to business unites to adopt cybersecurity controls and engage with internal and external stakeholders to educate on control requirements and communicate impact of policy changes.

Help to align information security priorities and initiatives with the business’s strategic roadmap.

Support the Information Technology Risk Program by working with the business unit to document exception requests for situations where the policy cannot be implemented.

Advise business unit management on risk issues related to information security and recommend actions aligned with Omnicell’s risk management, compliance, and information security programs.

Drive remediation or mitigation of vulnerabilities, security audit findings, penetration tests and other identified security risks.

Define and report key performance indicators (KPIs) and metrics aligned with business initiative and deliver them to non-technical audiences in a way they are understood.

Contribute to company security awareness activities and materials.

Communicate plans for emerging technology adoption to the Information Security team proactively.

Participate in cyber security incident response teams when needed.

Required Skills and Knowledge:

Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.

Knowledge of security and control frameworks, such as NIST, ISO, PCI, HITRUST, and HIPAA Security with applicable knowledge of best practices.

Demonstrable experience with understanding business focus and processes and ability to inject cybersecurity into the business through teamwork and influence.

Demonstrable experience with the ability to work effectively with diverse teams and varying personalities and adapt management style to effectively reach mutually beneficial outcomes.

Strong Risk management and remediation skills.

Basic Qualifications:

Bachelor’s Degree plus 8 years’ Information Technology experience OR

HS Diploma/GED plus 10 years information technology experience.

5 years management experience in IT related applications, processes, and procedures

Strong written and verbal communication skills across all levels of the organization

Preferred:

Certifications: CISSP, CISA, or CISM

Work Conditions:

Onsite (Grapevine, TX) / Office Environment

Flexibility to be available occasionally outside of regular business hours/weekends

Occasional travel up to once per quarter.

Since 1992, Omnicell has been committed totransforming pharmacy carethroughoutcomes-centric innovationdesigned to optimize clinical and business outcomes across all settings of care. We strive to be the healthcare provider’s most trusted partner by our guiding promise of “Outcomes. Defined and Delivered.”Our comprehensive portfolio ofrobotics, smart devices, intelligent software, and expert servicesis helping healthcare facilities worldwideto improve business and clinical outcomesas they move closer to the industry vision of the Autonomous Pharmacy.Our guiding principles inform everything we do: As Passionate Transformers, we find a better way to innovate relentlessly.

Being Mission Driven, we consistently deliver on our promises.

Our Entrepreneurial spirit makes the most of EVERY opportunity for innovation.

Understanding that Relationships Matter creates synergies that yield the greatest benefits for all.

In Doing the Right Thing, we lead by example in ALL we do.

We value creating an inclusive culture and a healthier world through ESG initiatives, Employee Impact Groups, learning, well-being programs, and more. Join us in transforming the pharmacy care delivery model, making patient care safer and smarter for all.

Explore more InfoSec / Cybersecurity career opportunities Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr