Information Security Architect

Houstonmethodistcareers; Houston (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

Houston Methodist is seeking an Information Security Architect to design, build, test, and implement systems within the IT network. This role develops security standards, mentors junior staff, and leads enterprise security architecture planning and initiatives.

The position requires a Bachelor’s degree in a relevant field and seven years in IT with five in information security. Exempt status with strong communications and cross-functional collaboration skills is essential.

Qualifications

• Seven years experience in Information Technology including five years in information security.
• Excellent understanding of network security, network hardware configuration, network protocols and network standards.

Responsibilities

• Gains organizational commitment for IT Security plans.
• Communicates effectively throughout the organization to cultivate a culture of security awareness and support ongoing education.
• Serves as a mentor to more junior team members and assists with training.
• Reviews current system security measures and recommends and implements enhancements.
• Partners with Security Analysts to ensure prompt response to security incidents and post-event analyses.
• Establishes security procedures and conducts cyber incident response drills.

Skills

Network security

Security architecture

Threat assessment

Communication

Mentoring

Project planning

Education

Bachelor’s degree in cyber security, computer science, information systems or computer engineering

Job description

At Houston Methodist, the Information Security Architect position is responsible for designing, building, testing and implementing systems within the Houston Methodist IT network. The Information Security Architect prepares security standards and recommends updates to security policies and procedures. Serves as a mentor to more junior team members . Develops and maintains the high-level plan for the overall logical and technical architecture of the enterprise security postures. The Information Security Architect provides technical leadership and consulting across the organization including strategic recommendations and project planning. The Information Security Architect gains organizational commitment for information security plans, initiates and participates in projects related to information security and leads associated implementations and upgrades.

FLSA STATUS

Exempt

QUALIFICATIONS

EDUCATION

• Bachelor’s degree required, preferably in cyber security, computer science, information systems or computer engineering

EXPERIENCE

• Seven years experience in Information Technology to include five years experience in information security.

LICENSES AND CERTIFICATIONS

Preferred

• CISSP - Certified Information Systems Security Professional (IISSCC) and
• Certified Ethical Hacker (CEH)

SKILLS AND ABILITIES

• Demonstrates the skills and competencies necessary to safely perform the assigned job, determined through on-going skills, competency assessments, and performance evaluations
• Sufficient proficiency in speaking, reading, and writing the English language necessary to perform the essential functions of this job, especially with regard to activities impacting patient or employee safety or security
• Ability to effectively communicate with patients, physicians, family members and co-workers in a manner consistent with a customer service focus and application of positive language principles
• Expert understanding of network security, network hardware configuration, network protocols, network standards supervision
• Ability to communicate effectively to all level of the organization and translate technical language to non technical audiences
• Ability to partner across the organization to drive security strategies that support business goals and objectives
• Strong business acumen
• Strong understanding in mobile device security management to include the configuration and administration of mobile manager applications if assigned to mobile security

ESSENTIAL FUNCTIONS

PEOPLE ESSENTIAL FUNCTIONS

• Gains organizational commitment for IT Security plans.
• Communicates effectively (oral and written) throughout the organization to cultivate a culture of security awareness and support ongoing education to support security awareness and adherence.
• Serves as a mentor to more junior team members and assists with training through formal and informal methods.

SERVICE ESSENTIAL FUNCTIONS

• Reviews current system security measures and recommends and implements enhancements.
• Implements security systems by specifying intrusion detection methodologies and equipment. Oversees security equipment and software installations and configurations.
• Partners with Security Analysts to ensure prompt response to security incidents. Provides thorough post-event analyses.
• Evaluates network and security technologies. Develops requirements for local area networks (LANSs), wide area networks (WANs), virtual private networks (VPNs) routers, firewalls and related security and network devices.

QUALITY/SAFETY ESSENTIAL FUNCTIONS

• Conducts regular system tests and ensures continuous monitoring of network security.
• Makes recommendations regarding system access based on need and role.
• Establishes security procedures and conducts cyber incident response drills.

FINANCE ESSENTIAL FUNCTIONS

• Prepares system security reports by collecting, analyzing and summarizing data and trends to ensure timely and cost effective project timelines for systems implementation and upgrades
• Evaluates new security tools and negotiates purchase agreements.

GROWTH/INNOVATION ESSENTIAL FUNCTIONS

• Proactively stays up to date on the latest security standards, authentication protocols and best practice security products. Shares information and trains members.
• Maintains in-depth knowledge of organizational strategic priorities.
• Proactively manages own professional development. Completes Individual Development Plan (IDP).

SUPPLEMENTAL REQUIREMENTS

WORK ATTIRE

• Uniform: No
• Scrubs: No
• Business professional: Yes
• Other (department approved): No

ON-CALL*

Note that employees may be required to be on-call during emergencies (ie. Disaster, Severe Weather Events, etc) regardless of selection below.

• On Call* Yes

TRAVEL**

Travel specifications may vary by department

• May require travel within the Houston Metropolitan area Yes
• May require travel outside Houston Metropolitan area Yes