Cybersecurity Business Systems Analyst II

About Banner Health

Banner Health was named to Fortune’s Most Innovative Companies in America 2025 list for the third consecutive year and named to Newsweek's list of Most Trustworthy Companies in America for the second year in a row. We’re proud to be recognized for our commitment to the latest health care advancements and excellent patient care.

The Banner Third Party Risk Management team helps support the business by conducting thorough assessments on potential vendors, as well as many other duties. We work closely with contracting, legal, and other pillars of cybersecurity to ensure the safe and successful implementation of new services at Banner Health.

As a Business Systems Analyst II, you will be responsible for conducting risk assessments using a variety of resources including Service Now and proprietary questionnaires to ensure vendors and/or potential new services are implemented securely, and align with Banner’s values, mission, and cybersecurity strategy. You will also conduct assessments on requested software and mobile applications, as well as policy exception documentation, and risk remediation. You will work closely with several pillars of cybersecurity such as Identity and Access Management and Security Architecture as you work to keep our systems and data secure.

This is a remote position. In this role you would work Monday through Friday normal business hours 9am - 5pm AZ time zone and can be a remote position if you live in the following states only: AL, AK, AR, AZ, CA, CO, FL, GA, IA, ID, IN, KS, KY, LA, MD, MI, MN, MO, MS, NC, ND, NE, NH, NM, NV, NY, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI, WV & WY.

Your pay and benefits (Total Rewards) are important components of your Journey at Banner Health. Banner Health offers a variety of benefit plans to help you and your family. We provide health and financial security options, so you can focus on being the best at what you do and enjoying your life.

Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.

Position Summary

This position is responsible for delivering Cybersecurity objectives to plan and designing, developing, and implementing, efficient business, technical, financial, and operational practices or systems in support of core organizational functions and business processes. This includes gathering and analyzing data in support of business cases, proposed projects, and systems requirements. This individual is competent to work at the highest practical understanding of the Essential Functions across the Cybersecurity organization. You will be required to apply proven communication, analytical, technical, and problem-solving skills to help maximize the benefit of Cybersecurity practices and investments. Provides all customers. both internal and external, of Banner Health with excellent service experience by consistently demonstrating our core and leader behaviors each and every day.

Core Functions

• Support process enhancement and redesign efforts to streamline Cybersecurity delivery.
• Review and analyze the effectiveness and efficiency of existing systems and processes to develop strategies for improving or further leveraging, consolidating, or decommissioning.
• Provide insight into scope and parameters of required analysis in order to define outcome criteria and deliver measurable actions as part of daily efforts as well as in projects.
• Contribute to the determination of key data points from raw data and generate information to create meaningful actionable metrics and represent at an executive level.
• Support research efforts to make recommendations.
• Operate in compliance with all federal, state, and local mandated information security laws, rules, and guidelines.
• Remain current with the latest industry information.
• Ability to work within procedures with minimal oversight
• Ability to communicate effectively with leaders at all levels of the organization.
• Under general direction, this position is responsible for information security across multiple departments system-wide and requires interaction at all levels of staff and management.
• Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards.
• Provides all customers of Banner Health with an excellent service experience by consistently demonstrating our core and leader behaviors each and every day.

Minimum Qualifications

• Must possess strong knowledge of business, cybersecurity, information technology and/or computer science as normally obtained through the completion of a bachelor's degree.
• Certification may be required in at least one of the following areas within one year of entering the position: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Systems Security Certified Practitioner (SSCP), Payment Card Industry - Internal Security Assessor (PCI-ISA), Certified in Risk and Information Systems Control (CRISC), HealthCare Information Security & Privacy Practitioner (HCISSP), CompTIA Security+ or other certification designated by the Information Security Leader.
• Must possess three years of experience in a healthcare or related environment or an equivalent combination of relevant education, technical, business and healthcare experience.
• Must demonstrate expertise in information technology and healthcare.
• Needs experience in medium to large scale project planning and reporting either individually or in a team.
• Requires communication and presentation skills to engage technical and non-technical audiences.
• Requires ability to communicate and interact across facilities and at various levels.
• Ability to balance project workloads with customer support and on-call demands.
• As is typical in this industry, variable shifts and hours and carrying/responding to a pager may be required.
• Demonstrate proficiency with the Microsoft Suite of products and other tools depending on position requirements.

Preferred Qualifications

• Advanced degree may substitute for work experience.
• Additional Related Education And/or Experience Preferred.

Key skills/competency

• Cybersecurity Business Systems Analyst
• Risk Assessments
• Third Party Risk Management
• ServiceNow
• Vendor Security
• Information Security
• IT Security
• Compliance
• Policy Exception Documentation
• Risk Remediation