Information Security Advisor

Elevance Health, Inc.; Atlanta (GA); Híbrido; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Elevance Health is seeking an Information Security Advisor to lead vulnerability management and security operations across on-premises and cloud environments. The role emphasizes CVSS-based assessments, vulnerability remediation, and collaboration withCloud Security Engineering and application teams to ensure robust security controls.

The position requires 5 years of related experience, a bachelor’s in a relevant field, and proven ability to document SOPs, runbooks, and performance metrics.

Formación

• Bachelor’s degree in Information Systems, Computer Science, or a related field.
• Five (5) years of experience in related occupation(s).
• Three (3) years of experience with CVSS, vulnerability management tools, and database security.
• Experience administering database technologies including SQL, Oracle, and DB2.
• Experience with cloud environments and compliance requirements (SOC 2, PCI-DSS, HiTrust).

Responsabilidades

• Document SOPs and maintain runbooks.
• Run vulnerability scans and administer vulnerability risk assessments for on-premise and cloud environments.
• Collaborate with Cloud Security Engineering and application teams to provide remediation guidance.
• Report vulnerabilities and metrics to stakeholders.
• Support vulnerability remediation across cloud and container environments.

Conocimientos

Vulnerability management

CVSS methodology

Cloud security

Database security

Cross-functional collaboration

Educación

Bachelor's degree in Information Systems, Computer Science, or related field

Master's degree in Information Systems, Computer Science, or related field

Herramientas

SQL

Oracle

DB2

Qualys

Guardium

Prisma

Descripción del empleo

Information Security Advisor

Location: Ideal candidates will be able to report to our Pulse Point location at 740 W. Peachtree St NW, Atlanta, GA 30308.

This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workspace.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

Work Hours: Monday to Friday, 8:00 am to 5:00 pm

The Information Security Advisor is responsible for representing infrastructure security support in significant projects and performing the most complex operations and administration tasks.

How You Will Make an Impact:

• Document standard operating procedures (SOP), maintain and update runbook.

• Validate report data to ensure accuracy.

• Create process flows and metrics for internal review.

• Run vulnerability scans on databases before releasing to production to eliminate potential vulnerabilities and validate proper controls are in place.

• Administer vulnerability and secure configuration scanning for databases and servers on premise and in the cloud.

• Analyze vulnerabilities with available exploits to identify opportunities to mitigate or remediate vulnerability exposure on impacted systems.

• Administer vulnerability risk assessment methodology based on Common Vulnerability Scoring System (CVSS) utilizing Qualys, Guardium and Prisma vulnerability assessment technologies.

• Communicate with system owners to help support remediation of identified vulnerabilities.

• Work with Cloud Security Engineering/operations and application teams to provide remediation guidance and consultation for vulnerabilities/misconfigurations.

• Vulnerability Risk assessment for Cloud Environments.

• Reporting and communication for cloud/container vulnerabilities, including automation and integrations.

• Cross collaboration for vulnerability remediation support with Penetration Testing and Application Security workflows.

Minimum Requirements:

• Bachelor's degree in Information Systems, Computer Science, or a related field of study.

• Five (5) years of experience in related occupation(s).

Experience Requirements:

• Five (5) years of experience in related occupation(s) must include:

• Three (3) years of experience in all of the following: Administration of database vulnerability management assessment tools;

• Performance of vulnerability assessment utilizing the Common Vulnerability Scoring System (CVSS);

• Administration of database technologies including SQL, Oracle, and DB2;

• Operating and administering infrastructure or applications with Cloud environments; and

• Executing activities in alignment with compliance and contractual requirements;

• AICPA SOC 2;

• Payment Card Industry Data Security Standard (PCI-DSS); and

• HiTrust.

Alternate Education:

• Employer will accept a Master's degree in Information Systems, Computer Science, or a related field of study and

• Three (3) years of experience in related occupation(s). Must have skills listed above.

Who We Are

Elevance Health is a health company dedicated to improving lives and communities – and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve.

How We Work

At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business.

We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process.

The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws.

Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process should submit the Accessibility Accommodation Request Form and a member of the team will be in contact.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.

Prospective employees required to be screened under Florida law should review the education and awareness resources at HB531 | Florida Agency for Health Care Administration.