JFK Johnson Rehabilitation Institute · 23 hours ago
IT CYBERSECURITY ANALYST IV-PATCH MANAGEMENT (PM) - DIGITAL TECHNOLOGY SERVICE
Edison, NJ
Full-time
Hybrid
Senior Level
7+ years expHackensack Meridian Health is committed to improving patient care and supporting its employees. The Cybersecurity Analyst IV-Patch Management role focuses on leading the enterprise-wide patch management program, ensuring timely deployment of security patches and maintaining system security across all HMH systems and applications.
Hospital & Health Care
Responsibilities
Support Manager in developing and maintaining the enterprise-wide PM strategy, aligning program activities with organizational risk tolerance and business requirements
Lead the evaluation, selection, and implementation of enterprise PM solutions and automation tools, with the approval of the Manager
Oversee and manage the end-to-end PM lifecycle, including patch testing, deployment, verification, and reporting, ensuring adherence to established processes
Direct the analysis of patch release notes, cybersecurity advisories, and vulnerability data to assess patch criticality and prioritize deployment, providing detailed analysis and recommendations to the Manager
Establish and enforce PM Service Level Agreements (SLA), working with DTS/IT teams and system owners to ensure timely patch deployment, and report on SLA compliance to the Manager
Develop and maintain comprehensive PM policies, standards, and procedures, ensuring alignment with the overall program strategy
Lead the management of patch exceptions, developing and overseeing the implementation of mitigation strategies for non-compliant systems, and providing regular status updates to the Manager
Provide advanced guidance and consultation to DTS/IT leadership and other departments on PM best practices and integration with change management, supporting the Manager in driving process improvements
Monitor and analyze emerging PM trends, technologies, and cybersecurity advisories to proactively adapt the PM program, providing recommendations to the Manager
Actively guide and mentor peers and junior cybersecurity personnel, providing guidance and fostering their professional growth
Travel to any HMH location, possibly with minimal notice, to provide immediate on-site support for cybersecurity incidents, urgent investigations, or other critical requests from cybersecurity or hospital leadership
Other duties and/or projects as assigned
Adheres to HMH Organizational competencies and standards of behavior
Qualification
Required
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Work experience (4 years) may be substituted
Minimum of 7-9 (11+ if no degree) years of experience in a cybersecurity-related role/similar IT role, with significant PM experience
High level of PM methodologies, tools, technologies, operating systems, applications, and change management processes knowledge
Advanced analytical, problem-solving, and risk assessment skills, with the ability to analyze complex patch data and develop effective deployment strategies
Excellent communication (written and verbal), presentation, and influencing skills, with the ability to coordinate with various teams and stakeholders, including executive leadership
Experience with scripting languages (e.g., Python, PowerShell) for automating PM tasks
Experience with enterprise PM solutions and automation tools (e.g., System Center Configuration Manager [SCCM], Ivanti)
Strong leadership and mentoring skills, with a passion for developing and guiding team members
Demonstrated commitment to continuous learning and professional development in the PM domain
Familiarity with cybersecurity governance, risk, and compliance best practices and tools
Ability to travel to other HMH locations as needed
Proficient computer skills that may include but are not limited to Microsoft Office and/or Google Suite platforms
Certified in at least one of the following at hire or must obtain within one (1) year of hire: a. International Information System Security Certification Consortium (ISC2) Certification b. Information Systems Audit and Control Association (ISACA) Certification c. CompTIA Certification d. Global Information Assurance Certification (GIAC) e. Or other related cybersecurity certification
Preferred
Experience in integrating PM with VM and cybersecurity operations
Knowledge of operating systems and application security hardening techniques
Experience with cloud security technologies and best practices (e.g., Amazon Web Services [AWS], Azure, Google Cloud Platform [GCP])
Familiarity and/or experience working in healthcare provider environments
In-depth knowledge of healthcare-specific regulations and standards (e.g., Health Insurance Portability and Accountability Act [HIPAA]/Health Information Technology for Economic and Clinical Health Act [HITECH])
Other relevant vendor certifications in PM products
Benefits
Health
Dental
Vision
Paid leave
Tuition reimbursement
Retirement benefits
Company
JFK Johnson Rehabilitation Institute
Offering New Jersey’s most comprehensive rehabilitation services, JFK Johnson Rehabilitation Institute is a 94-bed facility located in Edison, NJ, serving residents of the tristate area for more than 40 years.
10001+ employees
Funding
Current Stage
Late StageCompany data provided by crunchbase