Note: If you are CURRENTLY employed at Children's and/or have an active badge or network access, STOP here.  Submit your application via Workday using the Career App (Find Jobs).

Work Shift

Day

Work Day(s)

Shift Start Time

Regular

Protects the confidentiality, integrity, and availability of Children's Healthcare of Atlanta's information systems. Serves as an expert advisor to management, peers, and clinical users in defining, recommending, and implementing necessary controls and procedures to cost-effectively manage system access and permissions. Assists in development, implementation, and maintenance of world-class information security organization, including policies, access management, information technology infrastructure, and regulatory compliance. Oversees and coordinates Information Systems & Technology identity access management team for clinical and business system access.

Experience

• 7 years of experience in practitioner and management with information security governance, organizational structure, concepts, controls, and audits
• 7 years of experience in practitioner and management understanding of identity and access management, provisioning and de-provisioning, password management/synchronization, authentication, authorization, single sign-on, policy writing, compliance audits, training and awareness, and incident response and investigations
• 7 years of experience in practitioner and oversight of product deployment and operational responsibility for identity management, password reset, and other relevant tools
• 7 years of experience in practitioner and oversight in design and maintenance of permissions and role-based access control models for industry-standard enterprise resource planning or electronic medical record system
• 7 years of experience in practitioner and oversight in design and maintenance of Microsoft Active Directory, Microsoft EntraID and Office365 permissions and role-based access control models
• 2 years of experience in network and systems administration
• Experience in working with legal, audit, and compliance staff
• Experience in developing and maintaining policies, procedures, standards, and guidelines

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• 2 years of experience in a healthcare setting
• Experience in Epic security strongly preferred
• Working knowledge of Workday, ServiceNow and Symplr
• Strong knowledge of physical and logical security systems
• Experience in leadership in an information technology support organization

Education

• Bachelor's degree in Computer Science, Information Systems, related field, or equivalent work experience.

Certification Summary

• No professional certifications required

Knowledge, Skills, and Abilities

• Strong understanding of identity management account and entitlement lifecycle, federated identity management, onboarding and offboarding, privilege accumulation, role-based access control, authentication, authorization, and accounting, access reviews/re-certifications
• Strong leadership abilities with the capability to develop and guide information security team members and work with minimal supervision
• Strong knowledge of industry-standard human resources information systems
• Strong knowledge of regulatory credentialing system
• Strong knowledge of applicable legal and regulatory requirements, e.g., Health Insurance Portability and Accountability Act, Payment Card Industry Data Security Standard, and NIST CSF or 800-53
• Strong project management skills
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Excellent verbal, written, and interpersonal communication skills, including ability to communicate effectively and build consensus with teams across organizational lines, including business leaders/managers, information technology engineering/operations, administrators, physicians, nurses, allied health workers, and patient care systems users
• Strong project management skills and experience in creating and managing project plans, including budgeting, resource allocation, demand management, and conflict resolution

Job Responsibilities

• Manages identity access management team for clinical and business applications.
• Works closely with leadership and teams to prioritize work to accomplish goals and maintain operations.
• Develops quality measures to assess overall success of the team and the information security program and provides reports to leadership.
• Evaluates and selects relevant vendor tools based on project requirements and communicates with established and potential vendors to establish and maintain relationships resulting in successful security operations.
• Contributes to the definition of and managing the information security program.
• Analyses, defines, and implements technology and policy architecture.
• Champions awareness influences compliance with security policies and provides solutions for business-specific security issues.
• Oversees day-to-day identity access management operations.
• Contributes to development, coordinating, and managing information security systems and develops overall business continuity and disaster recovery plans.
• Serves as thought leader for information security regulatory compliance.
• Responsible for all aspects of managing and leading a team including interviewing, hiring, training, developing, directing work and processes, managing performance, recognizing, and rewarding employees.
• Mentor team members and encourage personal and professional growth.
• Encourage ongoing skill development by providing opportunities for continued education.

1575 Northeast Expy NE

Information Security