Lead Information Security Analyst

Engagement Overview
EMS|MC is seeking an experienced independent contractor to provide information security services supporting defined security operational needs and security projects within the EMS|MC corporate environment. The engagement will focus on security monitoring and analysis, incident response support, threat intelligence, security administration, compliance and risk management, security awareness, and related process improvements in accordance with agreed-upon deliverables.
Scope of Services
Monitoring security tools, logs, and alerts for indicators of threats, unauthorized activity, or other security concerns.
Performing triage and analysis of security events and escalating matters to designated EMS|MC resources when appropriate.
Investigating identified vulnerabilities; reviewing vulnerability-management data; and supporting remediation, patch-management verification, and consultation with designated system owners in accordance with applicable policy SLAs.
Resolving assigned security portal tickets in accordance with applicable service level agreements (SLAs).
Documenting security incident findings, response actions, and remediation steps and supporting incident detection, containment, and remediation in accordance with established protocols.
Updating security process documentation in coordination with designated EMS|MC stakeholders.
Identifying and implementing approved opportunities to automate or improve security processes.
Monitoring emerging threat trends and vulnerabilities, analyzing relevant threat intelligence, and implementing approved proactive defense measures.
Administering or supporting endpoint protection, firewalls, and other security systems in accordance with applicable change-management requirements.
Supporting the maintenance and review of access control lists, user permissions, and role-based access across systems.
Consulting with designated IT resources regarding endpoint configurations and security controls aligned with applicable policies.
Supporting security audits and regulatory compliance activities, including HIPAA, PCI DSS, and SOC 2 requirements, as applicable.
Supporting user and role-based access audits and documenting identified abnormalities or improper access in accordance with applicable compliance requirements.
Supporting security awareness activities, including security awareness training and periodic security testing such as phishing simulations.
Supporting the maintenance, review, and application of IT security policies and procedures for agreed-upon initiatives.
Expected Deliverables
Documented security monitoring, event triage, vulnerability analysis, and resolution or escalation of assigned security matters.
Incident-response documentation capturing findings, response actions, and remediation steps for applicable security events.
Vulnerability-management reviews, remediation recommendations, and verification results aligned with applicable policy SLAs.
Current process and technical documentation reflecting agreed-upon security monitoring, incident-response, administration, and related workflows.
Threat-intelligence analyses and recommendations or approved proactive defense measures addressing identified threats and vulnerabilities.
Security administration outputs for agreed-upon endpoint protection, firewall, access-control, user-permission, and related security activities.
Access-audit and compliance documentation, including applicable logs, reports, control evidence, and other materials supporting HIPAA, PCI DSS, SOC 2, and related requirements.
Security awareness and testing outputs, including agreed-upon phishing simulations or other security testing activities and associated results.
Approved automation or process-improvement solutions that improve the efficiency, consistency, or reliability of security operations.
Contractor Qualifications
Demonstrated professional experience in Information Technology, Application Security or a similar discipline, including four or more (4+) years of hands-on experience with information, data, system, or application security.
Strong knowledge of cybersecurity principles, common threat vectors, risk-management practices, security frameworks, and industry best practices.
Demonstrated ability to analyze security issues, assess risk, troubleshoot complex problems, and develop practical recommendations or solutions.
Ability to independently manage priorities, projects, and assigned deliverables through timely completion.
Strong written and verbal English communication skills with the ability to articulate complex database reliability concepts and findings to technical and non-technical stakeholders.
Ability to work independently and collaboratively, adapt to evolving security priorities and requirements, and maintain a high level of accuracy and attention to detail.
Additional Experience Preferred
Relevant certifications such as CompTIA Security+, CompTIA Network+, GSEC, SSCP, or equivalent.
Experience with IT, cybersecurity, or network administration, including Microsoft 365, Entra ID and Active Directory.
Hands-on experience with security technologies and incident response, including endpoint protection, vulnerability-management tools, firewalls, or similar security solutions.
Working knowledge of Windows and Linux operating systems, networking fundamentals, and system and security logs.
Experience with scripting or automation using Bash, PowerShell, Python, or similar technologies.
Knowledge of the HIPAA Security Rule, HITECH Act, PCI DSS, SOC 2, and applicable data privacy and security principles.
Experience identifying and implementing security process, workflow, or automation improvements.
Engagement Details
Services will be performed pursuant to a written Independent Contractor Agreement and applicable Statement(s) of Work.
Deliverables, priorities, timelines, and other engagement-specific terms will be established by mutual agreement before the applicable services begin.
Initial Term: The initial engagement is anticipated to continue for up to twelve (12) months. Prior to the conclusion of the initial term, EMS|MC and the contractor may mutually evaluate whether to extend the independent contractor engagement or pursue an employment opportunity, if there is mutual interest.• Any employment relationship would be subject to a separate offer of employment, successful completion of the Company's hiring process, and execution of all required employment documentation. Nothing in this posting or any resulting agreement guarantees future employment, continued engagement, or an extension of the initial term.
Independent Contractor Engagement
This opportunity is for the provision of professional services by an independent contractor. Nothing in this posting or any resulting agreement is intended to create an employer-employee relationship.

Work arrangement
Yes