Information Security Engineer

Porters Neck Village; Des Moines (IA); On-site; USD 98,000 - 122,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

401(k) with company match

Paid parental leave

Vacation time

Job summary

LCS is seeking an Information Security Engineer to manage user access and identity management across all applications. The role focuses on safeguarding networks and systems from cyber threats and requires collaborating with IT teams to enforce least-privilege access and security standards.

The position reports to the VP of Information Technology and emphasizes risk assessments, security monitoring, and ongoing security policy development within senior living environments.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent year of experience.
• 6+ years related experience
• In-depth knowledge of security best practices, data protection, and regulatory compliance
• Excellent problem-solving skills and the ability to troubleshoot complex issues
• Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders

Responsibilities

• Administer and manage various IT Security technologies including Microsoft Entra, Okta identity management, vulnerability management, spam email technology, simulated phishing technology, and generative AI solutions.
• Manage the complete user access lifecycle for corporate associates, contractors, consultants, and third-party vendors, including provisioning, modifications, transfers, and terminations.
• Ensure employee access to business and clinical applications is assigned according to job responsibilities, least-privilege principles, and established security standards.
• Conduct periodic user access reviews and certification campaigns for critical systems used across senior living operations, including financial, resident management, healthcare, and human resources applications.
• Monitor security alerts, suspicious activity, and system-generated events to identify potential threats impacting LCS communities, corporate operations, or resident information.
• Administer and support enterprise security solutions, including endpoint protection, email security, vulnerability management, identity protection, device management, and security monitoring platforms.
• Partner with Infrastructure and Application teams to remediate security vulnerabilities, implement security hardening recommendations, and maintain secure system configurations.
• Participate in investigations involving suspected security incidents, unauthorized access attempts, phishing attacks, malware infections, or policy violations.
• Perform security risk assessments for new technologies, business initiatives, acquisitions, community transitions, and third-party vendor solutions.
• Support due diligence and integration activities related to community acquisitions, management changes, and new community openings.
• Develop and maintain information security policies, standards, procedures, and access governance practices.
• Assist with business continuity and disaster recovery planning activities to support uninterrupted operations across LCS-managed communities.
• Support internal audits, external audits, and regulatory assessments by documenting controls, collecting evidence, and responding to audit requests.
• Educate associates and business partners on cybersecurity risks, security policies, and best practices designed to protect resident and organizational information.
• Research emerging cybersecurity threats and recommend enhancements to strengthen security controls throughout the organization.
• Maintain documentation related to security systems, access management processes, operational procedures, and technical standards.
• Perform other duties and responsibilities as assigned.

Skills

Security best practices

Data protection

Regulatory compliance

Problem solving

Communication

Team collaboration

Education

Bachelor's degree in Computer Science or related

Equivalent years of experience

Tools

Microsoft Entra

Okta identity management

Vulnerability management

Email security

Phishing simulations

Generative AI security

Job description

The Information Security Engineer is responsible for the daily operations of user access and identity management for all LCS customer and business applications. Responsible for researching, planning, and executing security measures to protect LCS computer networks and systems from cyber-attacks.

This position reports to the VP, Information Technology.

Experience is Everything.

At LCS, experience is everything. We provide you the opportunity to use your talents in a progressive, growing organization that makes a positive difference in the lives of the seniors we serve. If you are seeking an organization that gives back, you’ll love working here. Our principles and hospitality promises define our company culture. LCS employees can be found participating in volunteer activities, getting involved in our committees or collaborating with team members in our innovative workspace. You’ll find several opportunities to grow as a professional, serve the community, and enhance the lives of seniors.

What You’ll Do:

• Administer and manage various IT Security technologies including, but not limited to; Microsoft Entra, Okta identity management, vulnerability management, spam email technology, simulated phishing technology, and generative AI solutions.
• Manage the complete user access lifecycle for corporate associates, community associates, contractors, consultants, and third-party vendors, including provisioning, modifications, transfers, and terminations.
• Ensure employee access to business and clinical applications is assigned according to job responsibilities, least-privilege principles, and established security standards.
• Conduct periodic user access reviews and certification campaigns for critical systems used across senior living operations, including financial, resident management, healthcare, and human resources applications.
• Monitor security alerts, suspicious activity, and system-generated events to identify potential threats impacting LCS communities, corporate operations, or resident information.
• Administer and support enterprise security solutions, including endpoint protection, email security, vulnerability management, identity protection, device management, and security monitoring platforms.
• Partner with Infrastructure and Application teams to remediate security vulnerabilities, implement security hardening recommendations, and maintain secure system configurations.
• Participate in investigations involving suspected security incidents, unauthorized access attempts, phishing attacks, malware infections, or policy violations.
• Perform security risk assessments for new technologies, business initiatives, acquisitions, community transitions, and third-party vendor solutions.
• Support due diligence and integration activities related to community acquisitions, management changes, and new community openings.
• Develop and maintain information security policies, standards, procedures, and access governance practices.
• Assist with business continuity and disaster recovery planning activities to support uninterrupted operations across LCS-managed communities.
• Support internal audits, external audits, and regulatory assessments by documenting controls, collecting evidence, and responding to audit requests.
• Educate associates and business partners on cybersecurity risks, security policies, and best practices designed to protect resident and organizational information.
• Research emerging cybersecurity threats and recommend enhancements to strengthen security controls throughout the organization.
• Maintain documentation related to security systems, access management processes, operational procedures, and technical standards.
• Perform other duties and responsibilities as assigned.

What We’re Looking For:

Required qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent year of experience
• 6+ years related experience
• In-depth knowledge of security best practices, data protection, and regulatory compliance
• Excellent problem-solving skills and the ability to troubleshoot complex issues
• Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders

Preferred qualifications

• Relevant industry certifications such as CISSP, CISM, CompTIA Security+, or vendor-specific identity certifications

Why Join Us?

• Industry Leader.
• Inclusive & collaborative culture.
• Top Workplace USA.
• Top Workplace Iowa.
• Charity and community involvement.
• Outstanding advancement opportunities.
• Ongoing career development.

Benefits

Competitive pay, great benefits and vacation time. We are an equal opportunity employer with benefits including medical, dental, life insurance, disability, 401(K) with company match and paid parental leave.

Our Commitment

LCS creates living experiences that enhance the lives of seniors. You’ll see this commitment in our people. They’re talented, dedicated professionals who truly care about residents, with each conducting his or her work with integrity, honesty and transparency according to the principles of LCS. We strive to help every community succeed—strengthening available resources, establishing proven practices that lead to long-term growth and value for those living in, working for and affiliated with the community. Check us out on our website: https://www.lcsliving.com

Additional Information

Travel frequency: 0-10%

Estimated Salary: $98,000 - $122,000

The actual title & salary will carefully consider a wide range of factors, including your skills, qualifications, experience, and other relevant factors.

A POST-OFFER BACKGROUND CHECK, INCLUDING REFERENCES IS REQUIRED.

LCS IS AN EQUAL OPPORTUNITY EMPLOYER.