IT Security Manager

AltaPointe Health; Mobile (AL); On-site; USD 110,000 - 155,000; Full time

Job summary

AltaPointe Health in Mobile, AL seeks an Information Technology Security Manager to lead the security team, develop policies, and oversee risk management across systems.

The role requires extensive experience in security operations, regulatory compliance (HIPAA, PCI), and a CISSP path with the ability to implement and monitor security controls and incident response.

Strong communication and leadership are essential to align security with business goals and protect patient data.

Qualifications

• Bachelor or Associate Degree preferred; equivalent experience considered.
• 5+ years of information systems security experience.
• CISSP certification within 12 months of employment.

Responsibilities

• Supervise and lead AltaPointe's Security Team.
• Develop and administer information security policies and procedures.
• Monitor compliance with HIPAA, PCI and other standards.
• Collaborate with leadership on security policies and projects.
• Coordinate incident response and risk assessments.
• Oversee vendor risk management and security testing.

Skills

Security operations

HIPAA/PCI compliance

CISSP target

Leadership

Communication

Education

Bachelor or Associate Degree preferred

CISSP certification within 1 year

Job description

Overview

The Information Technology Security Manager serves in a supervisory capacity and is responsible for staffing and monitoring security systems. This position ensures all information security policies, design, implementation, maintenance, and support of the information security infrastructure comply with company policies.

Responsibilities

Primary Duties

• Supervision and leadership of the AltaPointe Security Team
• Create a framework for roles and responsibilities within the security team
• Monitor regulation compliance for current and future standards, including PCI, HIPAA
• Develop and administer information systems security policies and procedures in compliance with local, state, and Federal government regulations.
• Works with the leadership and management in the planning and delivery of security policies, projects, and services.
• Research, implement and maintain the latest advances in information technology security with best practices for current and future growth.
• Document security incidents and assess the impact and cause.
• Develop and maintain a well-defined incident response program.
• Develop and maintain a vendor risk management system with assessments of the risks.
• Audit Policies and Controls regularly, and report findings.
• Work with other departments to reduce the overall risk through technical controls and policies.
• Evaluate and install hardware and software solutions to protect sensitive information.
• Coordinate and execute penetration testing, risk analyses and security assessments.
• Maintain patch management procedures with an ability to deploy patches promptly.
• Collaborates with Application Developers to perform testing of application or platform components and implement best practices.
• Maintain intrusion detection and prevention systems.
• Evaluate and manage server and desktop endpoint protection solutions.
• Educate through seminar and online media the employees of AltaPointe concerning security risks and best practices for the prevention of security weaknesses.
• Provide regular reporting on the status of the information security program to management.
• Management and reporting of the employee awareness program
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend remediation plans, and communicate information about residual risk.

Other duties as deemed necessary should include, but are not limited to, the following:

• Participates in IT team meetings and initiatives.
• Participates in the strategic planning process for IT.
• Participates on committees deemed necessary to support standards and accreditations.
• Provides application training when deemed necessary.
• Performs other duties as assigned by the supervisor.

Administrative and other related duties as assigned.

• Actively participates in Performance Improvement activities.
• Actively participates in AltaPointe committees as requested.
• Completes assigned tasks in a timely manner.
• Treats patients with dignity and respect.
• Works in a cooperative manner with other AltaPointe employees.
• Follows AltaPointe policies and procedures.

Qualifications

Bachelor or Associate Degree preferred. 5 years or more of experience in computer information systems accepted in lieu of degree with a combination of Training, Certifications, and progressive relevant work experience in the area of information technology security. Completion of CISSP certification within one year of employment of position. Comprehensive knowledge of security operations and related procedures, plus a demonstrated proficiency in administering security solutions. Knowledge of information technology security standards, systems, and management of the established standards. Candidate should have experience deploying and managing security-related solutions. Ability to communicate effectively with others.