IT Security Analyst

**Who is eHealth Saskatchewan?**
eHealth Saskatchewan is a Treasury Board Crown Corporation with a unique blend of healthcare, information technology, and citizen services. Our vision is “Connected healthcare, accessible to everyone, everywhere” with a mission to “Collaborate to transform healthcare through the use of information and innovative technology”. It is a complex environment, constantly evolving and quickly changing as we live our values of excellence, integrity, teamwork, courage, resilience and collaboration.

A large and complex organization, eHealth is comprised of 30+ clinical and non-clinical program (service) areas that all work together to support health care providers and teams across the province in delivering the best possible care to patients, providers, citizens, and health system users. Programs range from primary care to acute care, and includes laboratories, pharmaceuticals and diagnostics. Additional programs that also support patient care and information, include Virtual Care, the MySaskHealthRecord, and the Provincial Electronic Health Record. eHealth is also responsible for the administration of various pieces of legislation to manage the registration of/changes to all vital event records (e.g. birth, marriage, death, etc.), registration of legal name changes, registration of adoptions, and for maintaining the provincial health registry for health services eligibility and distribution of health services cards.

The eHealth teams engage directly with health system partners and other stakeholders both provincially and federally to ensure all services are delivered efficiently and effectively.

**The Role**:
A key to success in this role is building strong relationships, having a strong customer focus, a knack for solving complex problems, and making connections by knowing who else to involve and when. To make that happen, you will possess exceptional written and verbal communication skills and thrive in a dynamic, complex technology driven environment. Within our environment, the situations you will encounter aren’t black and white, so you must be proficient in solving complex problems, delivering solutions, and enjoy ‘working within the gray’. Proven experience and skills in attention to detail, effective communication, problem solving, documentation standards, and a rigor for change management protocols and quality control are also required.

**You will have**:

- Experience in multiple security domains such as, Vulnerability Management, Incident Response, Security Operations, Architecture, and Policy is required;
- Knowledge of basic network security protocols and vendor experience with CISCO toolset is a plus;
- A strong knowledge of security technologies such as Encryption, data protection, design, privilege access, etc. is required; and
- knowledge of Security Information and Event Management (SIEM) tools, network and operating system security features (e.g., TCP/IP, Windows, Unix, Cisco, AD, LDAP) and network security technologies (e.g. firewalls, filtering routers, authentication mechanisms, IPSEC VPN, server hardening) is required.
- A Security Certifications in one of the following, such as CISSP, CISA, or CISM is recommended;

**You will have knowledge of**:

- strategic and project planning techniques;
- computer security principles, practices;
- database concepts, theories, and principles;
- requirements analysis and solution design techniques;
- networking architecture;
- operating systems;
- computer hardware and architecture;
- programming concepts, techniques and languages;
- information analysis techniques
- Confidentiality practices
- Handling stressful situation

**Competencies**

**Communication**
- write a variety of detailed, accurate and clear (technical) material such as user, systems and requirements, documentation and procedures, project plans letters, requests for proposals, feasibility studies, recommendations and reports, at a level appropriate to the target groups;
- orally explain or present (technical) information to a wide variety of technical and non-technical individuals and/or groups in a clear, accurate and understandable manner;
- demonstrate and promote the use and value of new technology, programs and services in a manner that creates understanding, captures interest and enhances user’ computer skills;

**Leadership**
- facilitate a group process to successfully implement technological change and business transition within the organization;

**Independence**

**Problem Solving**
- diagnose technical problems such as delays, malfunctions and errors in order to determine the true cause of the problem and provide a workable/reasonable/optimal solution in a reasonable timeframe;
- identify and respond to issues and concerns of others who may be angry or frustrated to reach a mutual understanding;

**Teamwork**
- create an environment that recognizes, supports, respects and welcomes diversity of employees and clients;
- work ind