IT Security Manager

AltaPointe Health Systems; Mobile (AL); On-site; USD 95,000 - 140,000; Full time

Job summary

AltaPointe Health Systems seeks an Information Technology Security Manager to lead the security team and oversee policy design, implementation, maintenance, and support of the information security infrastructure in alignment with company policies.

Responsibilities include regulatory compliance, incident response, risk management, vendor risk, and collaboration with IT and leadership to protect sensitive information and drive security improvements across the organization in Mobile, AL.

Qualifications

• Bachelor's or Associate degree preferred; 5+ years in information security.
• Completion of CISSP certification within one year of employment.
• Comprehensive knowledge of security operations, standards and risk management.
• Ability to communicate effectively with leadership and staff.

Responsibilities

• Supervise and lead the AltaPointe Security Team.
• Develop and maintain security policies and procedures.
• Ensure compliance with PCI, HIPAA and government regulations.
• Coordinate incident response and manage vulnerability programs.
• Perform penetration testing coordination and risk assessments.
• Collaborate with IT and other departments to reduce risk.
• Maintain intrusion detection and prevention systems.
• Provide regular status reports on the security program.

Skills

Security leadership

Incident response

Risk assessment

Penetration testing

Regulatory compliance

Education

Bachelor's degree

CISSP certification

5+ years IT security experience

Tools

IDS/IPS

Job description

The Information Technology Security Manager serves in a supervisory capacity and is responsible for staffing and monitoring security systems. This position ensures all information security policies, design, implementation, maintenance, and support of the information security infrastructure comply with company policies.

Primary Duties

• Supervision and leadership of the AltaPointe Security Team
• Create a framework for roles and responsibilities within the security team
• Monitor regulation compliance for current and future standards, including PCI, HIPAA
• Develop and administer information systems security policies and procedures in compliance with local, state, and Federal government regulations.
• Works with the leadership and management in the planning and delivery of security policies, projects, and services.
• Research, implement and maintain the latest advances in information technology security with best practices for current and future growth.
• Document security incidents and assess the impact and cause.
• Develop and maintain a well-defined incident response program.
• Develop and maintain a vendor risk management system with assessments of the risks.
• Audit Policies and Controls regularly, and report findings.
• Work with other departments to reduce the overall risk through technical controls and policies.
• Evaluate and install hardware and software solutions to protect sensitive information.
• Coordinate and execute penetration testing, risk analyses and security assessments.
• Maintain patch management procedures with an ability to deploy patches promptly.
• Collaborates with Application Developers to perform testing of application or platform components and implement best practices.
• Maintain intrusion detection and prevention systems.
• Evaluate and manage server and desktop endpoint protection solutions.
• Educate through seminar and online media the employees of AltaPointe concerning security risks and best practices for the prevention of security weaknesses.
• Provide regular reporting on the status of the information security program to management.
• Management and reporting of the employee awareness program
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend remediation plans, and communicate information about residual risk.

Other duties as deemed necessary should include, but are not limited to, the following

• Participates in IT team meetings and initiatives.
• Participates in the strategic planning process for IT.
• Participates on committees deemed necessary to support standards and accreditations.
• Provides application training when deemed necessary.
• Performs other duties as assigned by the supervisor.

Administrative and other related duties as assigned.

• Actively participates in Performance Improvement activities.
• Actively participates in AltaPointe committees as requested.
• Completes assigned tasks in a timely manner.
• Treats patients with dignity and respect.
• Works in a cooperative manner with other AltaPointe employees.
• Follows AltaPointe policies and procedures.

Bachelor or Associate Degree preferred. 5 years or more of experience in computer information systems accepted in lieu of degree with a combination of Training, Certifications, and progressive relevant work experience in the area of information technology security. Completion of CISSP certification within one year of employment of position. Comprehensive knowledge of security operations and related procedures, plus a demonstrated proficiency in administering security solutions. Knowledge of information technology security standards, systems, and management of the established standards. Candidate should have experience deploying and managing security-related solutions. Ability to communicate effectively with others.