Associate Information Security Analyst - Biomedical Security

Associate Information Security Analyst Biomedical Security

One of the nation's largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. has built an impressive record of achievement and performance. Growing steadily since its inception into an esteemed Fortune 300 corporation, annual revenues were $15.8 billion in 2024. Headquartered in King of Prussia, PA, UHS has approximately 99,000 employees and continues to grow through its subsidiaries. The Corporate Information Services Department is seeking a dynamic and talented Associate Information Security Analyst Biomedical Security.

The Associate Information Security Analyst Biomedical Security will support and assist with the implementation and maintenance of UHS applications or systems intended to protect the confidentiality, integrity and availability of UHS and affiliates Information Services assets. The candidate will be focused on identifying and managing security vulnerabilities in biomedical and clinical technology systems, including connected medical devices and IoT/OT infrastructure.

Key responsibilities include:

• System Implementation: Regularly meets with users, vendors, and IS staff to develop/modify system specifications. Assists with the implementations of security solutions and prepares the appropriate documentation. Researches and resolves technical security-related tickets. Adheres to appropriate UHS Project Management standards. Ensures strict adherence to work plans, reporting all serious deviations to management. Assists with the training of users in operating procedures for security solutions.
• System Maintenance/Support: Researches and resolves tickets including major security solution implementations and upgrades. Lead or support vulnerability management efforts for biomedical and IoT/OT devices. Assists with Patch Management Remediation. Assists with Vendor and Third Party Risk Management. Adheres to UHS Service Level and Change Management Policies. Provides on-call support as scheduled. Establishes and maintains regular communications with user community.
• Administration and Oversight: Maintains Service Excellence principles. Prepares and submits status reports to supervisor as required. Keeps management well informed of activities, needs, problems.

Qualifications:

• Position Requirements: This position requires a Bachelor's degree in Computer Science or Information Systems, with a concentration in cybersecurity highly preferred. No working experience is required. Up to one year of Information Technology or Systems experience would enhance the skills and abilities necessary to perform this job. An Associate's Degree in Computer Science or Information Systems, with a concentration in cybersecurity highly preferred AND one year of relevant Information Technology or Systems experience may be considered in lieu of the Bachelor's degree.
• Basic understanding of the following or similar information security technologies: Active Directory, Intrusion detection/prevention systems (IDS/IPS), Web filtering, Vulnerability scanners/remediation, Encryption technologies for data at rest and data in transit, Mobile device and removable media protection or management systems, Forensic analysis, Security Information and Event Management (SIEM) systems, Common Vulnerabilities and Exposures (CVE) databases, Anti-Virus Device Control.
• Basic knowledge of information security best practice standards or frameworks. Basic knowledge of general IS standards and quality methods and metrics. Basic knowledge of project management methods. Basic knowledge of security vulnerability management. Basic knowledge of security penetration testing and ethical hacking best practices. Knowledge of medical device protocols and systems (e.g., HL7, DICOM, PACS, infusion pumps, patient monitors) is a plus.
• Has a general familiarity with business practices, concepts and terminology sufficient to support the security applications or systems and communicate effectively with colleagues. Able to prioritize multiple tasks and be details oriented. Excellent communication, interpersonal and project management skills.

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

EEO Statement: All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.