Responsibilities:Develop Cyber Security policies, guidelines and standards in line with industry best practices
Initiate and interact with external consultants and auditors (external/internal) to conduct independent corporate security risk assessments and audits; coordinate corrective actions for identified security exposures.
Design and implement an IT security architecture, infrastructure, and strategy to meet corporate information and data security requirements, business objectives, and local, state and federal government regulatory requirements
Develop and implement system to address security incidents and respond to policy violations and prepare reports that document security breaches and the extent of the damage caused
Complete the annual Security Risk Assessment required for HIPAA compliance reporting
Develop and implement an ongoing risk assessment program targeting information security and privacy matters
Research new developments in information technology and their relevance to current organizational needs and security strategies
Ensure proactive maintenance of the technology environment, including compliance with governance and regulatory requirements and security management
Oversee the creation of project plans; present written and oral proposals to management as required
Maintains established departmental policies and procedures, objectives, quality assurance program, safety, environmental, and infection control standards. Assesses gaps in policies and procedures and create necessary policies and procedures to fill these gaps.
Understands and adheres to the Medical Center's Code of Conduct.
Familiar with the Medical Center's Mission, Vision, and Values Statements.
Other Duties:Participate in and/or lead multidisciplinary task forces, committees and projects.
Continue professional development through reading, participation in seminars and optional training.
Keep informed on direction and happenings in the healthcare and information security industries and within NBMC.
Performs other duties as assigned to support the overall objectives of the department and organization.
Position Qualifications:- 8-10 years of experience working in an IT security management role, including progressive experience with security policy development, security education, cloud and web application security, SAAS solutions, network security, network penetration testing, application vulnerability assessments, risk analysis, and compliance management; 5+ years of experience in a security management role.
- Proven project management track record
- Familiarity with healthcare industry
- Familiarity with cybersecurity approaches and methodologies
- Microsoft Office skills including MS Project
- Basic computer skills
- Excellent organizational, oral and written communication, and interpersonal skills
- Proficient in English
Education:Bachelor's degree in computer science, Information Management or related field.
Job Setting/Physical Demands:- IT Office area
- Off hours coverage when necessary
- Travel to offsite locations may be required
Salary commensurate with experience within posted range:$135,000 - $175,000 annually
We provide a comprehensive benefits package, including a competitive medical, dental, and vision plans. We prioritize work-life balance with a generous time off policy that includes ample vacation days, personal time, sick leave and nine paid holidays. Additionally, we are committed to the personal and professional growth of our employees, offering robust tuition reimbursement and continuing education programs to help support our employees ongoing development
Please note that selection of the candidate for any position will depend on several factors, including the individual's educational background, skills, and professional experience.
