About Children’s Minnesota Children’s Minnesota is one of the largest pediatric health systems in the United States and the only health system in Minnesota to provide care exclusively to children, from before birth through young adulthood. An independent and not-for-profit system since 1924, Children’s Minnesota is one system serving kids throughout the Upper Midwest at two free-standing hospitals, nine primary care clinics, multiple specialty clinics and seven rehabilitation sites. As The Kids Experts™ in our region, Children’s Minnesota is regularly ranked by U.S. News & World Report as a top children’s hospital. Find us on Facebook @childrensminnesota or on Twitter and Instagram @childrensmn. Please visit childrensMN.org. Children’s Minnesota is proud to be recognized by Modern Healthcare as one of 2023’s Top Diversity Leaders. The national honor recognizes the top diverse healthcare executives and organizations influencing public policy, care delivery, and promoting diversity, equity and inclusion in their organizations and the industry. Position Summary The Information Security Awareness Analyst is responsible for analyzing, implementing and maintaining security controls which enforce the information security policies and security best practice at Children's Minnesota. The analyst will focus on managing and utilizing our security awareness training tools and resources to train users and intensely raise security awareness across the organization. The analyst is also expected to have knowledge of security monitoring tools and responding to security threats and incidents to support SOC activities as needed. The ideal candidate should possess a combination of soft skills and technical skills and have experience training and communicating with users at all levels. License/Certification/Registration *CISSP, CompTIA Security+, GIAC certifications or similar preferred, but not required. Education: *Associate's degree is required in a computer field or equivalent Information Security work experience. *Bachelor's degree is preferred. Experience: *2 to 4 years of IT experience with responsibilities for Information Security. Knowledge/Skills/Abilities: *Knowledge and experience running and managing Security Awareness tools such as KnowBe4 to conduct phishing exercises as well as managing spam and phishing emails. *Knowledge and experience developing security awareness content, including newsletters, PowerPoints, security tips, guidelines and other materials. *Knowledge and experience training, presenting and communicating with users at all levels. *Knowledge and experience developing security awareness training initiatives that reduce the risk of user behavior / insider threat. *Knowledge and experience with threat intelligence, conducting threat research and documenting threat/vulnerability briefings for leadership. *Ability to identify security issues gaps or risks in People, Process and Technology, and recommending mitigation strategies to management. *Ability to utilize SOC tools and processes, preferably in M365 environment, which may include working with our MDR provider, incident response plans, SIEM, forensics, DLP and CASB tools. *Ability to work effectively as a team member and independently with minimal supervision (i.e., self- motivated and willing to stretch to meet important deadlines). *Excellent written and verbal communication skills. *Strong knowledge of Microsoft Office suite of products - Word, Excel, PowerPoint, Visio, etc. Physical Demands Please click here to view the Physical Demands The posted salary represents a market competitive range based on salary survey benchmark data for similar roles in the local or national market. Annual salaries displayed are based on full-time employment (40 standard hrs per week). Annual salaries for part-time positions will be prorated based on the employee’s scheduled weekly hours in relation to the full-time standard. When determining individual pay rates, we carefully consider a wide range of factors including but not limited to market indicators for the specific role, the skills, education, training, credentials and experience of the candidate, internal equity and organizational needs. In addition to your salary, this position may be eligible for medical, dental, vision, retirement, and other fringe benefits. Positions that require night, weekend or on-call work may be eligible for shift differentials or premium pay. All job offers are contingent upon successful completion of an occupational health assessment, drug screen, background investigation, and compliance with the U.S. Government Form I-9, Employment Eligibility Verification. Children’s Minnesota is proud to be an equal opportunity employer whose staff is representative of its community and considers qualified applicants for open positions without regard to race, color, creed, sex, religion, national origin, sexual orientation, genetic information, gender identity or expression, age, veteran status, disability, pregnancy, citizenship status, or any other characteristic protected under applicable federal, state, or local law.