Manager Identity and Access Management

10 Children's Healthcare of Atlanta, Inc.; Atlanta (GA); On-site; USD 120,000 - 150,000; Full time

Job summary

Children’s Healthcare of Atlanta is seeking an experienced information security leader to manage identity access management for clinical and business applications, partnering with executives to prioritize initiatives and maintain secure operations.

You will develop metrics, select vendor tools, and guide the information security program, ensuring policy compliance, disaster recovery planning, and staff development across the team.

Qualifications

• 7 years of experience in information security governance, controls, and audits.
• 7 years of experience in identity management, provisioning, de-provisioning, password management, authentication, authorization, SSO, policy writing, audits, training, awareness, and incident response.
• 7 years of experience in product deployment and operational responsibility for identity management, password reset, and related tools.
• 7 years of experience in design and maintenance of RBAC models for ERP or EMR systems.
• 7 years of experience in design and maintenance of AD, EntraID and Office365 RBAC models.
• 2 years of experience in network and systems administration.
• Experience working with legal, audit, and compliance staff.
• Experience developing and maintaining policies, procedures, standards, and guidelines.

Responsibilities

• Manages identity access management team for clinical and business applications.
• Works with leadership to prioritize work and maintain operations.
• Develops quality measures and reports to leadership.
• Evaluates and selects vendor tools and maintains vendor relationships.
• Contributes to defining and managing the information security program.
• Analyzes and implements technology and policy architecture.
• Champions awareness and compliance with security policies.
• Oversees day-to-day IAM operations.
• Contributes to business continuity and disaster recovery planning.
• Mentors team members and supports ongoing skill development.

Skills

Identity management

Access governance

Leadership

Project management

Education

Bachelor's degree in CS/IS or related field

Tools

Microsoft Active Directory

Microsoft EntraID

Office 365

Workday

ServiceNow

Symplr

Epic security

Job description

Work Shift Day Work Day(s) Shift Start Time Shift End Time Worker Sub-Type Regular

Children’s is one of the nation’s leading children’s hospitals. No matter the role, every member of our team is an essential part of our mission to make kids better today and healthier tomorrow. We’re committed to putting you first, and that commitment is at the heart of our company culture: People first. Children always. Find your next career opportunity and make a difference doing what you love at Children’s.

Job Description

Protects the confidentiality, integrity, and availability of Children's Healthcare of Atlanta's information systems. Serves as an expert advisor to management, peers, and clinical users in defining, recommending, and implementing necessary controls and procedures to cost-effectively manage system access and permissions. Assists in development, implementation, and maintenance of world-class information security organization, including policies, access management, information technology infrastructure, and regulatory compliance. Oversees and coordinates Information Systems & Technology identity access management team for clinical and business system access.

• Experience 7 years of experience in practitioner and management with information security governance, organizational structure, concepts, controls, and audits
• 7 years of experience in practitioner and management understanding of identity and access management, provisioning and de-provisioning, password management/synchronization, authentication, authorization, single sign-on, policy writing, compliance audits, training and awareness, and incident response and investigations
• 7 years of experience in practitioner and oversight of product deployment and operational responsibility for identity management, password reset, and other relevant tools
• 7 years of experience in practitioner and oversight in design and maintenance of permissions and role-based access control models for industry-standard enterprise resource planning or electronic medical record system
• 7 years of experience in practitioner and oversight in design and maintenance of Microsoft Active Directory, Microsoft EntraID and Office365 permissions and role-based access control models
• 2 years of experience in network and systems administration
• Experience in working with legal, audit, and compliance staff
• Experience in developing and maintaining policies, procedures, standards, and guidelines

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• 2 years of experience in a healthcare setting
• Experience in Epic security strongly preferred
• Working knowledge of Workday, ServiceNow and Symplr
• Strong knowledge of physical and logical security systems
• Experience in leadership in an information technology support organization
• Education Bachelor's degree in Computer Science, Information Systems, related field, or equivalent work experience.

Certification Summary

No professional certifications required

Knowledge, Skills, and Abilities

• Strong understanding of identity management account and entitlement lifecycle, federated identity management, onboarding and offboarding, privilege accumulation, role-based access control, authentication, authorization, and accounting, access reviews/re-certifications
• Strong leadership abilities with the capability to develop and guide information security team members and work with minimal supervision
• Strong knowledge of industry-standard human resources information systems
• Strong knowledge of regulatory credentialing system
• Strong knowledge of applicable legal and regulatory requirements, e.g., Health Insurance Portability and Accountability Act, Payment Card Industry Data Security Standard, and NIST CSF or 800-53
• Strong project management skills
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Excellent verbal, written, and interpersonal communication skills, including ability to communicate effectively and build consensus with teams across organizational lines, including business leaders/managers, information technology engineering/operations, administrators, physicians, nurses, allied health workers, and patient care systems users
• Strong project management skills and experience in creating and managing project plans, including budgeting, resource allocation, demand management, and conflict resolution

Job Responsibilities

Manages identity access management team for clinical and business applications. Works closely with leadership and teams to prioritize work to accomplish goals and maintain operations. Develops quality measures to assess overall success of the team and the information security program and provides reports to leadership. Evaluates and selects relevant vendor tools based on project requirements and communicates with established and potential vendors to establish and maintain relationships resulting in successful security operations. Contributes to the definition of and managing the information security program. Analyses, defines, and implements technology and policy architecture. Champions awareness influences compliance with security policies and provides solutions for business-specific security issues. Oversees day-to-day identity access management operations. Contributes to development, coordinating, and managing information security systems and develops overall business continuity and disaster recovery plans. Serves as thought leader for information security regulatory compliance. Responsible for all aspects of managing and leading a team including interviewing, hiring, training, developing, directing work and processes, managing performance, recognizing, and rewarding employees. Mentor team members and encourage personal and professional growth. Encourage ongoing skill development by providing opportunities for continued education.

Children’s Healthcare of Atlanta is an equal opportunity employer committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, sex, religion, national origin, citizenship, age, veteran status, disability or any other characteristic covered by applicable law.

Primary Location Address 1575 Northeast Expy NE Job Family Information Security

Children’s Healthcare of Atlanta has been 100 percent committed to kids for more than 100 years. A not-for-profit organization, Children’s is dedicated to making kids better today and healthier tomorrow. With 3 hospitals, 20 neighborhood locations and a total of 673 beds, Children’s is the largest healthcare provider for children in Georgia and one of the largest pediatric clinical care providers in the country. Children’s offers access to more than 60 pediatric specialties and programs and is ranked among the top children’s hospitals in the country by U.S. News & World Report. Children’s has been recognized as a Fortune 100 Best Place to Work, a Best Place for Working Mothers, and as a top employer for diversity and millennials. We offer a comprehensive compensation and benefit package that supports our mission, vision and values. We are proud to offer an array of programs and services to our employees that have distinguished us as a best place to work in the country. Connect to our mission of making kids better today and healthier tomorrow.

Have questions about the recruitment process? Check out What to Expect. https://careers.choa.org/lp/What%20to%20Expect/2895392d3ba166e6/?locale=en_US