Disaster Recovery Lead

Point32Health; Connecticut; On-site; USD 117,925 - 176,888; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement plans

Paid time off

Employer-paid life and disability insurance

Tuition program

Well-being benefits

Job summary

Point32Health in Connecticut is looking for a Lead Information Security Analyst who will collaborate closely with business and technology leadership to enhance cyber and information security processes. The ideal candidate should hold a Bachelor’s degree, have 5-7 years of relevant IT experience, and demonstrate expertise in security best practices, including Disaster Recovery. This role encompasses on-call responsibilities as part of incident management initiatives and requires strong communication skills, both verbally and in writing.

Qualifications

• 5-7 years of related work experience in Information Technology.
• Experience in Disaster Recovery/Business Continuity/Technology Resilience.
• Strong communication skills, both written and verbal.

Responsibilities

• Provide leadership in planning and designing security program improvements.
• Identify process improvements and develop related action plans.
• Ensure the confidentiality, integrity, and availability of information.

Skills

Information security best practices

Disaster Recovery

Crisis management

Collaboration skills

Analytical skills

Education

Bachelor’s degree in a related field

Master’s degree

Tools

Security information & event manager

Multi-factor authentication schemes

Network security

Job description

Who We Are

Point32Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are. We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

Job Summary

The Lead Information Security Analyst works closely with technology colleagues and business leadership to align both technical and strategic cyber & information security solutions with business needs. The Lead Information Security Analyst will help bridge the gaps between security best practices, evolving technical landscape, regulatory requirements, and business expectations with system configuration, security processes, control effectiveness, and operational efficiency. This position will support the design and continued maturity of cyber & information security processes and will interact regularly with business and technology stakeholders at Point32Health and external entities, as appropriate. The Disaster Recovery Lead role reports into and is part of the overall resilience program. This role has on-call responsibilities as part of the overall Incident Management & Crisis Management framework and is a critical partner for technology owners.

Disaster Recovery Responsibilities

• Evolves and maintains the DR framework, plans, and standards
• Ensures alignment with Business Continuity (BC) and Incident/Crisis Management
• Coordinates DR testing, exercises, and continuous improvement
• Tracks remediation of DR gaps and test findings
• Reports DR readiness and maturity to leadership
• Coordinates recovery and incident response activities

Job Description

DUTIES/RESPONSIBILITIES – what you will be doing (top five):

• Provides leadership in planning, designing, assessing, and/or implementing strategic security program improvements through:
• Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation
• Identifying process improvements and developing plans to meet or exceed security best practices
• Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.
• Providing technical expertise and administration of security solutions, where applicable
• Participate in the design, implementation, and administration of security tools to reduce risk
• Identifying technology trends and evolving social behavior to support the success of the business
• Oversee and maintain system consistency through regular audits
• Provide leadership and education to colleagues; participate as an active member of the IT and security community at Point32Health to promote information sharing, respectful challenge, efficiency, control effectiveness, and program quality through continuous improvement
• Create meaningful and detailed metrics based on security needs
• Other duties and projects as assigned.

Qualifications

Education

• Required (minimum): Bachelor’s degree in a related field
• Preferred: Master’s degree

Experience

• 5-7 years of related work experience in the Information Technology discipline.
• Preferred: 5-7 years of experience in Disaster Recovery/Business Continuity/Technology Resilience, including at least 2-3 years in a leadership or supervisory position.

Skill Requirements

• Broad knowledge of commonly used information security concepts, best practices, and standards
• Demonstrated expertise in at least two leading security & resilience areas, e.g., BC/DR, cyber resilience, cyber recovery, crisis management areas, e.g., privileged access management, enterprise identity & access management, cloud architecture, data loss prevention, security information & event manager, incident management, third-party vendor risk assessment, API security, network security, malware prevention, database masking, secure development, application security testing, multi-factor authentication schemes
• Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements
• Strong collaboration, facilitation, and negotiation skills.
• Strong communication skills, both written and verbal.
• Ability to explain complex technical issues to non-technical colleagues and business executives
• Ability to troubleshoot and independently solve problems as they arise
• Familiarity with HIPAA Security Rule and other regulatory requirements
• Proven analytical and problem-solving abilities
• Project and program management planning and organizational skills
• Customer service focused
• Time management and prioritization

Working Conditions And Additional Requirements

• Must be able to work under normal office conditions and work from home as required.
• Work may require simultaneous use of a telephone/headset and PC/keyboard and sitting for extended durations.
• May be required to work additional hours beyond standard work schedule.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Management retains the discretion to add to or change the duties of the position at any time.

Salary Range

$117,925.60 - $176,888.40

Compensation & Total Rewards Overview

The annual base salary range provided for this position represents a range of salaries for this role and similar roles across the organization. The actual salary for this position will be determined by several factors, including the scope and complexity of the role; the skills, education, training, credentials, and experience of the candidate; as well as internal equity. As part of our comprehensive total rewards program, colleagues are also eligible for variable pay. Eligibility for any bonus, commission, benefits, or any other form of compensation and benefits remains in the Company's sole discretion and may be modified at the Company's sole discretion, consistent with the law.

Point32Health offers their Colleagues a competitive and comprehensive total rewards package which currently includes:

• Medical, dental and vision coverage
• Retirement plans
• Paid time off
• Employer-paid life and disability insurance with additional buy-up coverage options
• Tuition program
• Well-being benefits
• Full suite of benefits to support career development, individual & family health, and financial health

For more details on our total rewards programs, visit https://www.point32health.org/careers/benefits/

We Welcome All

All applicants are welcome and will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Scam Alert

Point32Health has recently become aware of job posting scams where unauthorized individuals posing as Point32Health recruiters have placed job advertisements and reached out to potential candidates. These advertisements or individuals may ask the applicant to make a payment. Point32Health would never ask an applicant to make a payment related to a job application or job offer, or to pay for workplace equipment. If you have any concerns about the legitimacy of a job posting or recruiting contact, you may contact [e-mail]