IT Architect III - Information Security (Hybrid Work Schedule)

Position Summary/Position

The IT Architect III - Information Security will lead the planning, development and maintaining of information security Policies and Governance functions. As a seasoned professional and subject matter expert in the information security team will be responsibly leading the Policy framework and workflow in maintaining optimal guidelines from InfoSec perspective for the organization’s security.

Major Functions (Duties and Responsibilities)

1. Analyze existing Policies and Procedures in the InfoSec area and mature it to the industry expected standards of Healthcare Provider.
2. Lead the security categorization of business applications \ information systems and defines required NIST 800-53 & HIPAA controls to be implemented by application \ system owners.
3. Work with internal departments regarding process modification and development to ensure compliance with organization information security policies and controls requirements.
4. Maintain Information security risk register.
5. Evaluate the security of new business applications.
6. Produce information security program trending reports.
7. Lead the creation of and provide information security training.
8. Act as technical subject matter expert for security risk assessments and audits on IT assets, information systems, and business partners.
9. Propose solutions to reduce risks and overcome information security challenges.
10. Promote a culture of security awareness throughout the organization.
11. Attend conferences and training as required to increase and maintain proficiency.

Supervisory Responsibilities

Experience Qualifications

Nine (9) years of experience in developing Policy documents and Standards for Information Security & governance functions. Experience implementing Policy management using tools such as Compliance360. Producing InfoSec metrics and reports. Experience working with various business units to achieve policy-based security and compliance outcomes.

Education Qualifications

Bachelor’s degree from an accredited Institution required.

Professional Certification

InfoSec & Cyber Certifications preferred.

Drivers License Required

Knowledge Requirement

Knowledge of NIST SP 800 Series documents, NIST Cyber Security Framework, HIPAA security rule, Microsoft operating systems, Linux operating systems, general networking, System Development Lifecyle.

Skills Requirement

Excellent writing & communication skills. Excellent analytical and problem-solving skills. Strong logical reasoning skills and business intelligence.

Abilities Requirement

Ability to present to senior management. Ability to work in a collaborative and inclusive environment with the willingness to listen to alternative points of view.

Commitment to Team Culture

The IEHP Team environment requires a Team Member to participate in the IEHP Team Culture. A Team Member demonstrates support of the Culture by developing professional and effective working relationships that include elements of respect and cooperation with Team Members, Members and associates outside of our organization.

Working Conditions

Work involves heavy use of phones, computer keyboard and screens. 

Work Model Location

Physical Requirements