"Alerted.org

RESPONSIBILITIES

I. JOB SUMMARY/RESPONSIBILITIES:

• Serves as a lead in the support and maintenance of The Queen’s Health Systems’ (QHS) information security program.

• Actively promotes awareness and training of QHS Security Policies and related security topics.

• Key responsibilities include but are not limited to the following:

o Management and support of QHS’ information security technical controls, programs and policies.

o Support QHS initiatives and projects by providing information security-related consultation and technical assistance.

o Leads or assists in the design, planning, and implementation of security measures to ensure safety and security of all information systems assets and to enhance the security posture of the organization.

o Serves as a subject matter expert in support of security risk management and the IT Risk Management Program.

• Works closely with leadership, including the privacy, risk and compliance functions, to ensure compliance with regulatory requirements.

• Works closely with leadership in developing short and long term strategic plans.

• Supervises and directs work of assigned staff.

• Monitors activities to ensure coordination and management of projects and work assignments meet established dates and timelines.

II. TYPICAL PHYSICAL DEMANDS:

• Seeing, hearing, speaking, finger dexterity.

• Constant: sitting.

• Frequent: standing, walking.

• Occasional: stooping/bending, carrying usual weight of 12 pounds, reaching above shoulder level.

III. TYPICAL WORKING CONDITIONS:

• Not substantially subjected to adverse environmental conditions.

• Work schedule includes providing 24 hours/7 days a week support as required.

IV. MINIMUM QUALIFICATIONS:

A. EDUCATION/CERTIFICATION AND LICENSURE:

• Bachelor’s degree in Information Technology (IT) or related field; or four (4) years experience in information technology and/or information security may be substituted for the educational requirement.

• Current certification in at least one (1) of the following highly preferred:

o Global Information Assurance Certifications (GIAC)

o Certified Information Security Manager (CISSP)

o Certified Information Security Manager (CISM)

B. EXPERIENCE:

• In addition to the educational requirement, six (6) years of information security experience, preferably in healthcare, demonstrating in-depth knowledge and ability to independently design and manage complex security controls and processes.

• Two (2) years IT project management experience preferred.

• Prior supervisory/management experience.

• Experience to demonstrate the following IT Security Management experience:

o Security architecture design and implementation.

o Security appliances & tools including IDS, IPS, web/e-mail filtering, DLP, etc.

o Data encryption technology.

o Identity and privileged access management technology.

o Security monitoring and alerting technology.

o Threat and incident response management.

o Programming and/or scripting.

• Knowledge and ability to lead projects/initiatives of moderate complexity.

Equal Opportunity Employer/Disability/Vet