Job Summary:
Location: Methodist Corporate Office
Address: 825 S 169th St. - Omaha, NE
Work Schedule: Mon - Fri, 8:00am to 5:00pm. On call responsibilities, and some evenings and weekends as needed.
Perform monitoring of the environment and respond to all types of information security events. Provides assistance and support in the development and maintenance of information security protocols for the enterprise.
Responsibilities:
Essential Job Functions1. Strategy and Planning
- Research and stay informed of potential information security threats, industry trends, emerging technologies, and response alternatives.
- Review security policies, procedures, and guidelines as requested.
- Conduct research and provide insight to identify, assess, and deploy security technology solutions and through vendors, including but not limited to encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
- Complete approval, tracking and reporting any security exceptions as the need arises.
- Prepare status reports on security matters to analyze security risk and response of vendor security controls.
- Monitor and proactively recommend solutions for correcting issues related to security technology performance and capabilities of vendors.
- Collaborate on critical technology projects to ensure that security issues are addressed throughout the project life cycle.
- Provide data to assist with recommendations for security improvements and tool acquisition to Board and Senior Management.
2. Acquisition and Deployment
- Assist in the evaluation and use of security technologies and tools.
- Deployment of security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
- Understand processes and ensure appropriate levels of access are applied throughout the information and identity lifecycles.
- Participate in planning, selection, and implementation of new systems and technology solutions.
- Participate in system deployment or acquisition projects to assess security requirements and controls to ensure that security controls are implemented as planned.
3. Operational Management
- Assist with maintaining health system compliance with security control frameworks such as HIPAA, PCI and other law/regulations.
- Engage in regular assessment of the current IT security environment to identify weaknesses.
- Serve as a technical subject matter expert for assigned systems and backup on assigned systems.
- Demonstrate advanced knowledge in the security domain and provide technical direction to lead appropriate work on security related projects.
- Participate in the assessment of potential threats and risks to systems and management of those risks.
- Weigh business needs against security concerns to articulate issues and recommend options.
- Participate in the design, development, and delivery of security training programs.
- Proficient in following playbooks and procedures for responding to and reporting on Security Incidents.
4. Incidents and Tasks
- Respond with a sense of urgency.
- Escalate to supervisor any situation outside the employee's control that could adversely impact services.
- Ensure quality resolution and thorough and accurate documentation of incidents and tasks.
- Provide analysis regarding recurring incidents, recommending improvements aimed at reducing future occurrences.
- Provides on-call availability.
- Communicates with the appropriate individuals prior to reassigning an incident or task.
- Technical resource for admins and other IT department personnel to troubleshoot and resolve security incidents.
5. Teamwork and Documentation
- Updates system documentation in designated systems as new issues and fixes are identified.
- Defines and implements support procedures and protocols for Desktop, Service Desk, and other team members.
- Defines, develops, and implements procedures for system maintenance.
- Considered a knowledgeable resource for documenting KB Articles and SharePoint documentation.
- Actively mentors and trains teammates to assure needed support coverage.
- Does not exhibit territorialism toward responsibilities.
- Shares responsibilities and knowledge with any/all team members, and learns from them in return.
Schedule:
Mon - Fri, 8:00am to 5:00pm. On call responsibilities, and some evenings and weekends as needed.
Job Description:
Job RequirementsEducation
- Associate's Degree in Computer Science, Business Information Systems, Information Technology, Information Security or a related field required.
- Bachelor's Degree preferred.
- Relevant equivalent work experience may be substituted for degree.
Experience
- Minimum 3 years of IT experience (e.g., Security Operations Center, Network Operations Center, System Administrator, Helpdesk support, etc.) required.
- Active Directory experience preferred.
- Windows Desktop and Server administration preferred.
- Experience with enterprise-wide security architecture and/or security procedures preferred.
License/Certifications
- CompTIA Security+ certification or Certified Information Systems Security Professional (CISSP) certification required within 1 year of hire.
Skills/Knowledge/Abilities
- Skill organizing and managing workload.
- Skill troubleshooting technical issues.
- Skill providing customer service to all levels in the organization.
- Fundamental knowledge of information security technologies and best practices.
- Knowledge of network, software, and hardware configuration, maintenance, and performance tuning.
- Knowledge of LAN/WAN and wireless technology.
- Knowledge of network protocols, operating systems and concepts.
- Knowledge of Office 365 Suite.
- Knowledge of endpoint security solutions.
- Knowledge of Identity and Access Management systems.
- Knowledge of Asset Management systems and processes.
- Knowledge of enterprise CCTV cameras and systems.
- Knowledge of enterprise physical access control systems.
- Knowledge of firewall administration, multi factor authentication.
- Ability to capture and analyze log files.
- Ability to effectively communicate verbally and in writing.
- Ability to work in an environment of change.
- Ability to work in the absence of direct supervision.
- Ability to work a call schedule.
- Ability to automate manual functions.
Physical RequirementsWeight Demands
- Light Work - Exerting up to 20 pounds of force.
Physical Activity
- Not necessary for the position (0%):
- Occasionally Performed (1%-33%):
- Balancing
- Carrying
- Crouching
- Distinguish colors
- Grasping
- Lifting
- Pulling/Pushing
- Speaking/talking
- Standing
- Stooping/bending
- Twisting
- Walking
- Frequently Performed (34%-66%):
- Keyboarding/typing
- Reaching
- Repetitive Motions
- Sitting
- Constantly Performed (67%-100%):
Job Hazards
- Not Related:
- Chemical agents (Toxic, Corrosive, Flammable, Latex)
- Biological agents (primary air born and blood born viruses) (Jobs with Patient contact) (BBF)
- Physical hazards (noise, temperature, lighting, wet floors, outdoors, sharps) (more than ordinary office environment)
- Equipment/Machinery/Tools
- Explosives (pressurized gas)
- Electrical Shock/Static
- Radiation Alpha, Beta and Gamma (particles such as X-ray, Cat Scan, Gamma Knife, etc)
- Radiation Non-Ionizing (Ultraviolet, visible light, infrared and microwaves that causes injuries to tissue or thermal or photochemical means)
- Mechanical moving parts/vibrations
