Information Security Specialist

Insight Global; Paramus (NJ); On-site; USD 95,000 - 125,000; Full time

Job summary

Insight Global is seeking an Information Security Specialist to support enterprise cybersecurity and risk-management initiatives within a healthcare provider environment. The role involves assessing information systems, evaluating security posture, monitoring MFA, VPN, AD, and performing vulnerability scans and risk assessments.

The ideal candidate will collaborate with CISOs, privacy, compliance, legal, and IT teams to strengthen security controls and policy implementation across the

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of relevant information security experience.
• Experience in a healthcare provider setting.
• Knowledge of NIST CSF and risk management methodologies.
• Knowledge of HIPAA, PCI, and HITECH requirements.
• Experience with patch management, firewalls, IDS/IPS.
• Experience analyzing logs, forensic evidence, and attack artifacts.
• Experience with vulnerability scanning solutions.

Responsibilities

• Support enterprise cybersecurity and technology risk-management initiatives.
• Assess information systems and evaluate security posture of assets.
• Monitor access-control technologies (MFA, VPN, AD) and conduct vulnerability scans.
• Perform risk assessments, audits, and validate third-party security controls.
• Maintain incident response, disaster recovery, and business continuity plans.
• Assist in developing information security policies and procedures.

Skills

InfoSec experience

Risk management

Threat analysis

Vulnerability assessment

Incident response

HIPAA/compliance knowledge

Access-control systems

NIST CSF familiarity

SIEM training

MFA/VPN/AD experience

Education

Bachelor’s degree in Computer Science/IT

Tools

VMware

Citrix

SIEM tools

Job description

Job Description

Insight Global is seeking an Information Security Specialist to support enterprise cybersecurity and technology risk-management initiatives within a healthcare provider environment. This individual will assess information systems, evaluate the security posture and risk of critical organizational assets, and help implement security measures that protect systems, networks, and data. The specialist will monitor access-control technologies such as MFA, VPN, and Active Directory; conduct vulnerability scans, risk assessments, and technical security audits; and analyze security incidents to determine their root cause.This person will also assign and track remediation activities, maintain technical exception lists, review vendor and application security questionnaires, validate third-party security controls, and recommend security enhancements, services, and tools. Additional responsibilities will include maintaining incident response, disaster recovery, and business continuity plans; supporting data loss prevention and service-continuity efforts; participating in change-management processes; and helping develop information security policies and procedures.The ideal candidate will be a collaborative team player who can partner effectively with the CISO, privacy, compliance, legal, risk, application, infrastructure, engineering, vendor, and consulting teams to strengthen cybersecurity practices and control effectiveness across the enterprise.

Skills and Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field
• 3+ years of relevant information security experience
• Information security or IT experience within a healthcare provider setting
• Familiarity with security frameworks such as NIST CSF and risk management methodologies
• Knowledge of HIPAA, PCI, and HITECH regulatory requirements
• Knowledge of patch management, firewalls, and intrusion detection and prevention systems
• Experience analyzing logs, forensic evidence, and attack artifacts during cyber incident investigations
• Experience using vulnerability scanning solutions
• Understanding of TCP/IP, networking ports, protocols, traffic flow, system administration, the OSI model, and defense-in-depth
• Strong analytical, problem-solving, communication, organizational, and decision-making skills
• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Experience developing information security policies and procedures
• CISSP, HCISPP, CompTIA Security+, or ISACA certification
• SIEM-specific training or certification
• Experience with mobile operating systems, including Android, iOS, and Windows
• Experience with VMware, Citrix, and other core infrastructure components
• Experience with MFA, VPN, Active Directory, and other access-control systems
• Experience conducting internal and external technical security audits
• Experience assessing third-party vendors and reviewing application security questionnaires
• Experience with data loss prevention, incident response, disaster recovery, and business continuity planning
• Experience supporting biomedical or patient-treatment systems

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].