Analyst, Cybersecurity

Join Our Life-Saving Team!

Are you ready to elevate your career to new heights? PHI Health is looking for dynamic, driven individuals to join our team. We are committed to providing top-tier emergency medical services with unmatched speed and efficiency, saving lives when every second counts. By supporting our mission from the ground, you will play a crucial role in orchestrating the seamless operations that keep our advanced fleet soaring and our patients safe.

With PHI Health you’ll collaborate with the best minds in the industry, driving initiatives that enhance our services and expand our reach to those who need it most. If you're passionate about making a difference and thrive on challenges, PHI Health offers an extraordinary opportunity to impact lives and develop your professional career in a meaningful way.

Who We Are:

PHI Health is the leading air ambulance provider in the United States. With an unmatched safety record and the best aviation, medical and communication specialists in the field, we set the standard in the air medical industry. We transport more than 22,000 patients each year from our more than 80 bases across the country, all while offering services and outreach education to local communities and leading healthcare systems. Our mission is simple: move communities to health while maintaining the highest standard of safety, period.

Job Summary:

The Cybersecurity Analyst is responsible for supporting the organization's cybersecurity governance program through policy administration, risk management, security awareness, compliance coordination, third-party risk assessments, cybersecurity metrics, and operational program management.

This position ensures cybersecurity processes remain organized, documented, measurable, and aligned with organizational standards while supporting technical cybersecurity initiatives. The Cybersecurity Analyst works across Information Technology and business departments to coordinate security activities, maintain regulatory documentation, and improve organizational cybersecurity maturity across healthcare, aviation, and corporate operations.

Responsibilities Include:

• Coordinate and maintain the enterprise cybersecurity governance program.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Coordinate periodic policy reviews to ensure documentation remains current and aligned with regulatory and business requirements.
• Maintain the enterprise cybersecurity risk register and track mitigation activities through completion.
• Perform cybersecurity reviews for new technologies, software solutions, AI tools, and business initiatives using established risk assessment processes.
• Coordinate third-party security assessments and vendor cybersecurity reviews.
• Assist with HIPAA Security Rule, NIST Cybersecurity Framework, and other regulatory or contractual compliance activities.
• Coordinate cybersecurity evidence collection for internal audits, external audits, cyber insurance renewals, and customer security questionnaires.
• Administer the enterprise cybersecurity awareness program, including KnowBe4 campaigns, phishing simulations, and user education initiatives.
• Track cybersecurity metrics and key performance indicators and prepare executive dashboards and management reports.
• Coordinate Cybersecurity Council meetings, document action items, and track completion of assigned tasks.
• Maintain cybersecurity documentation, including inventories, exception registers, standards, and supporting records.
• Support incident response activities through documentation, communications, lessons learned, and corrective action tracking.
• Assist in coordinating tabletop exercises, business continuity planning, and disaster recovery testing.
• Monitor cybersecurity project milestones and ensure governance deliverables are completed on schedule.
• Assist in developing cybersecurity communications, awareness materials, newsletters, and organizational guidance.
• Maintain inventory of cybersecurity tools, licensing, subscriptions, and service contracts.
• Support annual cybersecurity program reviews and continuous improvement initiatives.
• Perform other cybersecurity administrative and operational duties as assigned.

PRIMARY FUNCTIONAL OWNERSHIP

• Cybersecurity Policies & Standards
• Governance Documentation
• Cybersecurity Risk Register
• AI Risk Intake Assessments
• Third-Party Risk Reviews
• Vendor Security Questionnaires
• Security Awareness Program
• KnowBe4 Administration
• Cyber Insurance Evidence
• Audit Coordination
• NIST Framework Tracking
• HIPAA Security Documentation
• Cybersecurity Metrics & Dashboards
• Cybersecurity Council Administration
• Business Continuity Documentation
• Security Program Reporting

The Successful Candidate Will Have:

• Education

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Information Systems, or related field; or equivalent combination of education and experience.

• Experience

• One to three years of experience in cybersecurity, information technology, compliance, risk management, auditing, or related fields preferred.
• Experience creating documentation, reports, or technical procedures.
• Experience coordinating projects or working across multiple departments preferred.
• Experience supporting regulated environments such as healthcare, aviation, or financial services is preferred but not required.

• Technical Knowledge

• Microsoft Defender Security Suite
• Microsoft Entra ID / Azure Active Directory

• Preferred Certifications

  Preferred but not required:

• Security+
• ISC² Certified in Cybersecurity (CC)
• Microsoft Security Fundamentals
• Certified HIPAA Security Professional (preferred)
• ITIL Foundation

• Skills

• Strong written communication skills.
• Excellent organizational and documentation abilities.
• Ability to manage multiple projects simultaneously.
• Strong analytical and critical thinking skills.
• Comfortable working with technical and non-technical stakeholders.
• Strong attention to detail.
• Excellent presentation and communication skills.
• Ability to learn new technologies quickly.
• Strong customer service mindset.
• Ability to maintain confidentiality.
• Microsoft 365 Security
• SIEM and security monitoring platforms
• Vulnerability management tools
• Identity and Access Management (IAM)
• Multi-factor Authentication
• Privileged Access Management
• Network security principles
• Endpoint security
• Email security
• NIST Cybersecurity Framework
• Security hardening standards
• Incident response methodologies

Schedule/Location:

• 5&2

• Phoenix, AZ

Compensation and Benefits:

• We offer a range of competitive pay and benefits package to keep our teams happy, healthy, and invested.

Our Core Competencies:

• Safe. We are absolute in our belief in the tenets of Destination Zero and that Zero is not only achievable, but the only acceptable outcome.

• Efficient. We are focused on outcomes that are smart and responsible by making the best use of our resources to maximize overall productivity and achieve sustainable profitability as a high performing organization. 

• Quality. We are committed to ensuring excellent organizational performance which produces sustainable and reliable outcomes.

• Service. We are dedicated to the service of our customers, our communities and each other.

Behavioral Competencies:

• Show Real Grit - With safety as your guide, you pursue every task with drive, energy and a commitment to finish. You give all that the situation requires, even in the face of resistance or setbacks. You serve with resiliency, determined to help others.
• Perform with Integrity – You always do what’s right.
• Be a great team player - In order to achieve the best possible outcomes for our patients and customers, you must treat others with dignity and respect, and be committed to working as a cohesive team toward a common purpose.
• Give and Get Help - Giving your all in the service of others can tax your wellbeing. Know the signs and have the courage to give help and get help when needed.

The PHI Health Advantage:

For more than 40 years, our company has been providing critical air medical transport services across the country. As an organization, we outfit each aircraft we fly with the most advanced technology, subject our crews to the most rigorous protocols and training and pioneer the most-forward thinking safety program in the country.

Everything that we do comes back to the safety of our crew and our patients. Our accident rate is well below the national average, and we were the first to receive the Vision Zero Aviation Safety Award. This belief has guided us towards a number of industry firsts and has given us the highest safety rating in the industry.

DISCLAIMER

The above Statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed, as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.

PHI, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws