Manager - Information Security

Lexington Health; Columbia (SC); On-site; USD 110,000 - 150,000; Full time

Job summary

Lexington Health is seeking an IT Security leader to oversee the development and delivery of security standards and architectures across the enterprise. You will manage incident response, risk assessments, and continuous improvement of security programs to protect patient data and systems.

The role requires an associate degree with extensive IT security experience in healthcare, plus multiple security certifications.

Qualifications

• Associate's Degree in Related Field required.
• 8+ years in information technology with 2+ years in information security within healthcare.
• Associate's Degree can substitute for 2 years of security experience.
• Must hold at least two technical certifications in information security; must pursue additional certifications.
• In-depth knowledge of cyber security technologies, processes, and threat intelligence; strong judgment, collaboration and project management.

Responsibilities

• Manages IT security staff and personnel actions.
• Trains and coaches staff on security technologies and incident response.
• Ensures infosec milestones and budgets are met.
• Creates security metrics and informs strategic planning.
• Leads incident management during breaches and high-risk vulnerabilities.
• Performs security risk assessments and coordinates remediation.
• Reviews security plans across networks and acts as a security consultant.
• Liaises with IT to monitor compliance and address unresolved issues.
• Provides security awareness training to personnel.
• Develops and manages security strategies.
• Oversees security audits (internal or third-party).
• Manages security team members and onboarding training.
• Evaluates budget and costs for security-related training.
• Assesses current architecture for vulnerabilities and improvements.
• Oversees upgrades and major changes to the security environment.
• Serves as focal point between security team and customers/organization.
• Initiates, develops, and maintains security policies and procedures.

Skills

Leadership

Information security

Risk assessment

Communication

Education

Associate's Degree in Related Field

Tools

Security applications

Security architectures

Job description

IT Services

Full Time

AM/PM Shift

40

Job Summary

Manages the development and delivery of IT security standards, best practices, architecture and systems to ensure information system security across the enterprise. Implements processes and methods for auditing and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments. Conducts studies within and outside the organization to ensure compliance with standards and currency with industry security norms. Manages and participates in the planning and implementation of security administration for all IT projects. Responsible for evaluation and selection of security applications and systems. Makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures. Reports to the IT Security Director.

Minimum Qualifications

• Minimum Education: Associate's Degree in Related Field
• Minimum Years of Experience: 8 Years of experience in information technology (to include 2 years of direct experience in information security within a complex healthcare setting)
• Substitutable Education & Experience: Associate's Degree can be substituted for 2 years of additional experience in information security within a complex healthcare setting
• Required Certifications/Licensure: Must hold at least two technical certification within the information security realm; Must be willing to obtain industry or vendor certifications.
• Required Training: In depth knowledge of cyber security technologies, processes, and threat intelligence; Must exhibit efficiency, collaboration, candor, and results orientation; Ability to exercise good judgment and political astuteness; Demonstrated ability to structure, drive, and manage projects with complex multi-disciplinary issues to closure with minimal direction; Excellent analytical and problem solving skills; Excellent communication, interpersonal and organizational skills.

Essential Functions

• Manages subordinate staff in the day to day performance of their jobs and has management level authority for personnel actions.
• Trains and coaches information security staff on the various security technologies and alerts to ensure proper response and risk mitigation.
• Ensures Infosec project / department milestones and goals are met and adhere to approved budgets.
• Creates information security metrics and analyze over time to assist Director Information Security with the development of information security plans and strategic goals.
• Leads incident management command centers and activities in the event of a data breach or high risk vulnerability, identify the security risks involved and resolve them.
• Performs security risk assessments and coordinate organizational actions to resolve.
• To review the security plans that have been implemented on the systems throughout the entire network of the organization, thus acting as an information security consultant.
• To act as a liaison to the department of information system and to monitor its compliance and direct the unsolved issues to the appropriate department.
• Provide information security awareness training to organization personnel.
• Create and manage security strategies.
• Oversee information security audits, whether performed by organization or third-party personnel.
• Manage security team members and all other information security personnel.
• Provide training to information security personnel during onboarding.
• Evaluate department budget and costs associated with technological training.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.
• Implement and oversee technological upgrades, improvements and major changes to the information security environment.
• Serve as a focal point of contact for the information security team and the customer or organization.
• To initiate, develop, and maintain information security policies and procedures and to ensure that the security strategies are being followed, so as to meet the organizational security goals and standards.
• Communicate information security goals and new programs effectively with other department managers within the organization.

Duties & Responsibilities

• Demonstrates leadership through the following critical responsibilities:
  • Develops and facilitates Tactical Planning Activities
  • Works with the Director of Information Security to develop work plans define tasks, target dates, level of efforts, resources required, skills required, etc.
  • Works with the Director, Information Security to appropriately assign and monitor the performance of the Information Security team members on approved projects.
  • Maintains a high level of awareness and recognition of situations that are possible risk issues and works diligently to mitigate or eliminate risks whenever possible.
  • Manages and leads multiple interrelated projects concurrently as well as manage daily operations.
  • Involves appropriate individuals and groups when planning for and implementing IT-related projects or IT-related process changes.
  • Actively participates in decision-making with the Director, Information Security to change or modify policies, systems, resource allocations etc., in order to remove barriers and meet customer needs.
  • As needed, facilitates the resolution of IT specific end-user questions and issues.
• Establishes and Enforces Team and Individual Accountability
  • Sets clear defined written performance
  • Holds self and team members accountable in meeting stated objectives, timetables and commitments.
  • Works with the Director, Information Security to establish performance expectations and measurements for individuals assigned to projects.
• Monitors and Communicates Status
  • Tracks, reviews and communicates status of projects timely and accurately
  • Regularly communicates progress, issues and results of assigned projects to the Director, Information Security, CIO, other IS Directors, IS stakeholders, and customers.
  • Works with the Director, Information Security to manage and monitor the expectations of impacted personnel regarding assigned projects.
  • Effectively uses a variety of techniques to ensure clear and timely communication to the Director, Information Security, CIO, other IS Directors, and customers / IS stakeholders.
  • Ensures Information Security Team is aware of projects, issues, priorities, situations, etc. to enable them to understand what they need to be working on or thinking about.
• Promotes teamwork and collaboration
  • Facilitates group learning and problem solving
  • Initiates formal and informal activities designed to promote team building.
  • Encourages creative tension and supports collaborative conflict resolution by identifying common ground and exploring differences.
• Focus on Recruitment and Retention Initiative
  • Define the skills needed for specific members.
  • Coordinate and lead interviews for candidates interested in open positions and participate in interviewing candidates for other open IS positions.
  • Consistently monitor performance and assesses competency of the IS team members.
  • Takes timely, appropriate actions to address substandard performers and when necessary administer progressive discipline.
  • Leads by example.
  • Must be able to work effectively with diverse groups of people and communicate effectively with all levels of hospital staff, physicians, vendors and consultants.
  • Performs all other duties as assigned.

Benefits

We are committed to offering quality, cost-effective benefits choices for our employees and their families:

• Day ONE medical, dental and life insurance benefits
• Health care and dependent care flexible spending accounts (FSAs)
• Employees are eligible for enrollment into the 403(b) match plan day one. LHI matches dollar for dollar up to 6%.
• Employer paid life insurance – equal to 1x salary
• Employee may elect supplemental life insurance with low cost premiums up to 3x salary
• Adoption assistance
• LHI provides its full-time employees employer paid short-term disability and long-term disability coverage after 90 days of eligible employment
• Tuition reimbursement
• Student loan forgiveness

Equal Opportunity Employer

It is the policy of Lexington Health to provide equal opportunity of employment for all individuals, and to remain compliant with applicable state and federal laws and regulations. Lexington Health strives to provide a discrimination-free environment, and to recruit, select, on-board, and employ all employees without regard to race, color, religion, sex, age, disability, national origin, veteran status, or pregnancy, childbirth, or related medical conditions, including but not limited to, lactation. Lexington Health endeavors to upgrade and promote employees from within the hospital where possible and consistent with the employee’s desires and abilities and the hospital’s needs.