Manager - Information Security

HonorHealth; Phoenix (AZ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

HonorHealth is seeking an Information Security Manager to lead the implementation and support of formal security frameworks across the organization. You will promote a culture of security, ensure CIA protections, and balance staff access with system usability.

You will direct security incident escalation, manage security operations, and work with multiple departments to meet governance, risk, and compliance requirements in a hybrid Arizona environment.

Qualifications

• Bachelor's degree in Information Technology or Business Administration required.
• 5 years IT management or supervisory experience in security domains.
• 8 years management experience in a health care environment preferred.
• CISSP or equivalent required; CISM/CISA/ITIL Foundation preferred.

Responsibilities

• Lead implementation and support of formal information security frameworks.
• Promote a culture of information security across HonorHealth.
• Directly manage personnel within the assigned area and provide metrics.
• Coordinate security incident management and escalation procedures.
• Ensure CIA of information resources and optimize security posture.

Skills

Leadership

Threat Management

IAM

Architecture

Data Protection

GRC

Security Operations

Incident Response

Education

Bachelor's degree in Information Technology or Business Administration

Job description

Primary City/State: Deer Valley - 2500 W Utopia Rd Phoenix, AZ 85027

Category: Information Security

Shift: Day

Department: Information Security

Hybrid, must reside in Arizona

1 day on-site (Thursday)

Great care starts with great people. (Like you.)

At HonorHealth, you'll find something special. From humble beginnings in 1927 to one of Arizona's largest nonprofit healthcare systems, our culture is built on warmth and neighborly kindness. Behind every smile is a highly skilled professional with deep expertise and an unwavering dedication to what matters most - caring for the health and well-being of people and communities across the greater Phoenix area.

Responsibilities

JOB SUMMARY

The Information Security Manager (ISM) is responsible for leading the implementation and support of formal Information Security frameworks and will take a central role in promoting a culture of information security throughout HonorHealth. The ISM will ensure HonorHealth has the protections and controls to effectively ensure the Confidentiality, Integrity and Availability (CIA) of information resources. The ISM will serve a critical role in optimizing HonorHealth's security posture to protect information resources from attack, theft, damage or unauthorized access. The ISM will lead the HonorHealth in the adoption and use of strong security measures to protect sensitive information, systems and resources, while balancing this with the ease of staff and stakeholder access to sensitive information and the efficient use of computer systems.

Essential Functions

• Provide leadership direction and subject matter expertise across one or more of our Information Security pillars including, Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response.
• Directly manages all human resource aspects of personnel management within assigned area including selection of new associates, initial and ongoing development, evaluation, counseling, scheduling, etc. Creates and updates standard work; Provide metrics for identified key performance indicators; Plans, establishes and revises work assignments; Monitors service management queues for work directives.
• Maintains customer-driven relationship with the operational departments across HonorHealth system care sites and corporate areas. Ensures that policies and procedures meet standards. Actively participates in decision making with management and seeks to understand the broader impact of current decisions and the effects on business requirements that will translate into system requirements.
• Provides direction as first point of contact for security incident escalations. Ensure that security incident escalation procedures are followed by all staff according to policy. Ensure that security events are clearly documented and contain detailed information regarding issue tracking and resolution. Identify and report system and network security issues ensuring all events are entered in ticket tracking application and escalated accurately. Ensure that all issues are proactively tracked and monitored to ensure timely resolution. Coordinate security incident management events follow escalation procedures as documented according to policy. Assists the Security team in security incident resolution and risk evaluations. Maximize value of purchased Information Security tools.
• Performs other duties as assigned.

Education

• Bachelors or 4 years' work related experience Information Technology or Business Administration Required

Experience

• 5 years IT management or supervisory practices, in areas such as Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response. Required
• 8 years Management experience in a health care environment and with health care applications and multi-institutional health systems or health care consulting experience Preferred

License and Certifications

• Certified IS Security Professional - Certification Combination of one or more of the following - CISSP, SAN Certs Upon Hire Required
• Information Technology Infrastructure Library V3 Certification - Certification Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ITIL v3 Foundation Certification Preferred

We're all in for your career.