Director Information Services Lvl 3

NYC Health + Hospitals; New York (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

NYC Health + Hospitals is seeking an experienced IT/Cyber Security professional to direct and design the development, maintenance and operation of computer-based information systems and data processing applications to meet the objectives and requirements of the health care system through providing reports, information, documentation and statistical data to facilitate the decision-making process, planning, control, audit and review of system-wide plans and objectives.

Qualifications

• Experience with vulnerability scanning tools, preferably Rapid7.
• Experience with vulnerability and patch assessment.
• Strong knowledge of vulnerability scoring systems (CVSS/CMSS), and security frameworks like OWASP and MITRE ATT&CK.
• Good understanding of Windows and Linux patching.
• Excellent writing and communication skills to convey findings and remediation status.
• Knowledge of network and operating system security.
• Knowledge of encryption algorithms and related advisories.
• Ability to create or modify scripts using PowerShell or Python to identify vulnerabilities.
• Security architecture experience and collaboration with cross-functional teams.
• High integrity and ability to work independently as well as in a fast-moving team.

Responsibilities

• Evaluates feasibility of EDP systems development and operating costs relative to benefits and objectives.
• Participates with technical, professional and managerial personnel in project analysis and input for user departments.
• Provides input for selection of computer, communications and peripheral equipment.
• Approves programming languages and standards for compilers and related tools.
• Approves and establishes programs for operating systems to optimize performance.
• Develops and coordinates equipment and personnel levels to support system needs.
• Reviews major information systems projects for schedule and cost efficiency.
• Supervises information services staff and ensures responsive department operations.
• Establishes liaison with senior management and contractors regarding department services.
• Directs planning, scheduling and budgeting of approved projects.

Skills

Vulnerability scanning

Vulnerability assessment

Security frameworks

Patch management

Encryption concepts

Scripting (PowerShell)

Scripting (Python)

Security architecture

Network security

Active Directory / IAM

Education

Bachelor’s Degree in Mathematics, Engineering, Business Administration, Accounting, Finance, Economics or related discipline

Tools

Nmap

Shodan

Metasploit

PowerShell

Python

Job description

Marketing Statement

NYC Health + Hospitals is the largest public health care system in the United States. We provide essential outpatient, inpatient and home-based services to more than one million New Yorkers every year across the city’s five boroughs. Our large health system consists of ambulatory centers, acute care centers, post-acute care/long-term care, rehabilitation programs, Home Care, and Correctional Health Services. Our diverse workforce is uniquely focused on empowering New Yorkers.

Marketing Statement

NYC Health + Hospitals is the largest public health care system in the United States. We provide essential outpatient, inpatient and home-based services to more than one million New Yorkers every year across the city’s five boroughs. Our large health system consists of ambulatory centers, acute care centers, post-acute care/long-term care, rehabilitation programs, Home Care, and Correctional Health Services. Our diverse workforce is uniquely focused on empowering New Yorkers.

At NYC Health + Hospitals, our mission is to deliver high quality care health services, without exception. Every employee takes a person-centered approach that exemplifies the ICARE values (Integrity, Compassion, Accountability, Respect, and Excellence) through empathic communication and partnerships between all persons.

Duties & Responsibilities

Purpose of Position:

Under direction, directs and designs the development, maintenance and operation of computer-based information systems and data processing applications to meet the objectives and requirements of the health care system through providing reports, information, documentation and statistical data to facilitate the decision-making process, planning, control, audit and review of system-wide plans and objectives.

Examples Of Typical Tasks

• Evaluates the feasibility of electronic data processing (E.D.P.) systems development and operating costs relative to benefits and objectives of the health care system. Reviews organizational designs with senior management for approval.
• Participates with technical, professional and managerial personnel in the analysis of proposed projects and programs and provides input for project requests from user departments and health care settings within the health care system.
• Provides input for selection of computer, communications and peripheral equipment to meet program design and applications of projected requirements and workloads based on cost considerations, performance specifications, demonstration of performance, vendor support, care of operations, maintenance and all technical factors.
• Approves programming language to be used and standards for the use of specific compilers, assemblers, communications, processors and other equipment.
• Approves and establishes programs for development and implementation of operating systems to enable the health care system’s computer and related equipment to operate most efficiently.
• Develops, establishes, maintains and controls appropriate levels of equipment and personnel, consistent with health care system needs, through integrating existing and emerging E.D.P. systems and applications into optimum management information systems and programs.
• Reviews the process of major information systems projects and data processing operations, corrects deficiencies in project fulfillment, slippages in schedules, cost overruns and operational inefficiencies.
• Supervises information services staff and organizes the department to respond promptly to requests and maintain flexibility of operations.
• Establishes and develops liaison with senior management, user departments, health care settings, consultants and contractors with regard to the services of the department.
• Directs planning, scheduling and budgeting of approved projects within the department to meet requirements of implementation within time and cost estimates.
• Directs the development of technical and professional education programs for departments to ensure that proper levels of professional and technical proficiency are maintained.
• Assesses level of departmental employees’ morale, establishes work performance standards, resolves employees’ complaints and grievances, provides leadership to attain effective productivity levels, and initiates actions and recommendations to accomplish departmental objectives.
  
  

Minimum Qualifications

• Bachelor’s Degree in Mathematics, Engineering, Business Administration, Accounting, Finance, Economics or a related discipline; and
• Six (6) years of experience in the field of data processing and computer systems and applications, of which three (3) years must have been in a supervisory role; and
• Strong technical knowledge
  
  

Department Preferences

Knowledge, Skills, Abilities And Other Requirements

• Experience with vulnerability scanning tools, preferably Rapid7
• Experience with vulnerability and patch assessment
• Strong knowledge of vulnerability scoring systems (CVSS/CMSS), and security frameworks like OWASP (Open Web Application Security Project), MITRE ATT&CK
• Good understanding of Windows and Linux patching
• Excellent writing and communication skills in order to communicate findings and remediation status
• Knowledge of network and operating system security
• Knowledge of encryption algorithms, known vulnerabilities from alerts, advisories, errata and bulletins
• Utilize/understand the use of open source tools such as Nmap, Shodan, and Metasploit to identify and confirm vulnerabilities and attack surface
• Be able to create or modify scripts using frameworks such as PowerShell or Python in order to scan for and validate more complex vulnerabilities
• Security architecture experience
• Must possess a high degree of integrity and trust along with the ability to work independently as well as work as part of a fast-moving team
• Strong Knowledge of infrastructure, application and security protocols in addition to configuration management techniques
• Knowledge of network security architecture concepts, including topology, protocols, components, principles (e.g. application of defense-in-depth), and traffic flows across the network (e.g. TCP & TCP/IP, OSI, etc.)
• Experience working with network access, identity, and access management (e.g. Active Directory, access federation, multifactor authentication, PKI)
• Experience working with operating systems (Microsoft Windows, Linux, UNIX, etc)
  
  

Years Of Experience

• A minimum of ten years of IT experience, with at least 7 years dedicated to IT/Cyber Security, including Solution Design.