I.T Security Technician

TITLE: I.T. SECURITY TECHNICIAN DEPARTMENT: OPERATIONS/COMPLIANCE SUPERVISED BY: I.T. MANAGER CLASSIFICATION: FULL-TIME NON-EXEMPT POSITION SUMMARY: The IT Security Technician provides technical support to employees while assisting with the implementation, monitoring, and maintenance of the organization’s information technology and cybersecurity environment.

This position serves as a frontline resource for help-desk requests, hardware and software troubleshooting, user account administration, and technical support while also performing cybersecurity responsibilities designed to protect organizational systems, networks, devices, and sensitive information. The IT Security Technician works closely with IT leadership to identify security risks, respond to cybersecurity incidents, maintain security controls, promote cybersecurity awareness, and support LCTHC’s data sovereignty and governance requirements.

ESSENTIAL JOB FUNCTIONS: Help Desk & Technical Support

• Respond to, prioritize, document, and resolve help-desk tickets in a timely manner.
• Provide technical support for desktops, laptops, mobile devices, printers, phones, and other technology.
• Troubleshoot hardware, software, network connectivity, application, and user-access issues.
• Install, configure, maintain, and troubleshoot computers and peripheral equipment.
• Install and support approved software and applications.
• Assist employees with password resets, account lockouts, multifactor authentication, and other access-related issues.
• Set up equipment and user accounts for new employees and assist with employee offboarding.
• Maintain accurate documentation of technical issues, resolutions, equipment, and system configurations.
• Escalate complex technical issues when appropriate. Systems & Account Administration
• Create, modify, disable, and maintain user accounts and access permissions.
• Assist with Microsoft 365, Active Directory, Entra ID, email, and other organizational systems.
• Apply role-based access and least-privilege principles when granting system permissions.
• Review inactive, unnecessary, or potentially unauthorized accounts and access.
• Assist with workstation deployment, updates, patching, and configuration.
• Support endpoint management, antivirus/endpoint detection systems, email security, and other IT management platforms.
• Assist with maintaining hardware and software inventories. Cybersecurity & Information Security
• Monitor cybersecurity tools, dashboards, alerts, and notifications for suspicious activity.
• Investigate suspicious login attempts, account activity, malware alerts, phishing attempts, and other potential security incidents.
• Assist with identifying, containing, documenting, and escalating cybersecurity incidents.
• Monitor endpoint protection and endpoint detection and response (EDR) systems.
• Assist with vulnerability identification, remediation, operating-system updates, and security patching.
• Review user access, administrative privileges, and security configurations for potential risks.
• Assist with implementing and maintaining multifactor authentication, conditional access, password policies, and other identity-security controls.
• Support data sovereignty and governance by ensuring organizational data, including PHI, is handled in accordance with LCTHC policies and applicable legal, regulatory, and contractual requirements.
• Assist with email-security controls, including phishing, spam, malicious attachments, suspicious links, and unauthorized email activity.
• Review and respond to reported phishing emails and educate employees regarding suspicious messages.
• Assist with network-security monitoring and identification of potentially unauthorized devices or activity.
• Assist with firewall, VPN, wireless, and remote-access security as assigned.
• Help ensure computers and other endpoints comply with organizational security standards.
• Maintain documentation related to security incidents, investigations, remediation efforts, and corrective actions. Cybersecurity Awareness & Compliance
• Assist with cybersecurity awareness and employee security training.
• Provide guidance to employees regarding phishing, passwords, multifactor authentication, data protection, and safe technology practices.
• Assist with periodic phishing simulations and security-awareness initiatives.
• Support organizational cybersecurity policies, procedures, standards, and best practices.
• Assist with security risk assessments, audits, vulnerability reviews, and corrective-action plans.
• Assist with maintaining documentation required for regulatory, contractual, and organizational compliance.
• Support information-security practices designed to safeguard protected health information (PHI) and other sensitive information in accordance with applicable HIPAA requirements and organizational policies.
• Follow LCTHC policies governing data sovereignty, ownership, access, residency, third-party handling, and cloud-based services. Incident Response
• Serve as a frontline technical resource when potential cybersecurity incidents are reported.
• Gather relevant information and technical evidence related to suspected security events.
• Assist with isolating compromised devices or accounts when directed or when established procedures require immediate action.
• Reset credentials, revoke sessions, disable accounts, or implement other approved containment measures.
• Document security incidents and actions taken.
• Escalate significant cybersecurity incidents to IT leadership immediately.
• Assist with recovery, remediation, and post-incident reviews.
• Other duties as assigned. EDUCATION, EXPERIENCE, CERTIFICATIONS AND LICENSES:
• High school diploma or equivalent required.
• Previous experience in information technology, help-desk support, desktop support, or a related technical position preferred.
• Demonstrated knowledge of computer hardware, software, networking, and troubleshooting.
• Basic understanding of cybersecurity principles and information-security practices.
• Ability to maintain confidentiality and appropriately handle sensitive organizational information.
• Strong troubleshooting, communication, documentation, and customer-service skills.
• Ability to prioritize multiple technical and security-related issues.
• Associate or bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field preferred.
• Experience with Microsoft 365 administration, Active Directory, Entra ID, endpoint management, EDR, firewalls, or security-monitoring platforms preferred.
• Experience working in a healthcare or other regulated environment preferred.
• Knowledge of HIPAA Security Rule requirements and security practices involving PHI preferred.
• Relevant certifications such as CompTIA A+, Network+, Security+, Microsoft certifications, or equivalent training preferred. All LCTHC employees are expected to: -Provide the highest possible level of service to clients; -Promote teamwork and cooperative effort among employees; -Maintain safe practices; and -Abide by the LCTHC policies and procedures as they may from time to time be updated. PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Sitting / Mobility: Approximately 70% of time is spent working at a desk. Balance of time (approximately 30%) is spent moving around work areas. Communication: Ability to effectively communicate with co-workers, Board members, members of outside agencies, in person, by telephone, and by email. Vision: Ability to effectively use a computer screen and interpret printed materials, memos, and other appropriate paperwork. Lifting / Carrying: Ability to occasionally lift and/or move objects weighing no more than 25 pounds. Stooping / Kneeling: Ability to access files/stock supplies in low cabinets and shelves. Reaching / Handling: Ability to input information into computer systems and retrieve and work with appropriate paperwork, equipment, and supplies. Use of standard office equipment, including computer, telephone, calculator, copiers, and fax. Work is performed in an office/clinic environment, continuous contact with other staff and the public. INDIAN PREFERENCE: Preference may be given to qualified Native American Indians according to the Indian Preference Hiring Act, CFR 25 USC 472. Other than Indian Preference, Lake County Tribal Health Consortium, Inc. adheres to all provisions of the Equal Employment Opportunities Act. NOTICE OF DRUG-FREE WORKPLACE ACT REQUIREMENT: LCTHC is committed to maintaining a drug-free and alcohol-free workplace. LCTHC believes that a healthy, productive workforce free from the effects of drugs is very important to all employees and patients. Substance abuse is incompatible with the health, safety, efficiency and the success of LCTHC. Employees who are under the influence compromise LCTHC’S interests, endanger their own and the health and safety of others and can cause a number of other work-related problems. As a condition of employment, each applicant receiving a job offer from LCTHC must take and pass the required drug screen test. HIPAA Health Insurance Portability and Accountability: This act was enacted to deal with three main areas with regard to patient information.
• Security of health information
• Standards of electronic transactions
• Privacy of individually identifiable health information. Lake County Tribal Health is an At-Will Employer. Either the employee or LCTHC can terminate the employment at will, without advance notice, at any time, with or without cause.