Job: Sr. Information Security Engineer

Department: Compliance
Schedule: Full time - Benefits Eligible
Shift: Days
Hours: 8:00 a.m. -5:00 p.m.
JOB SUMMARY:

Under minimal supervision, provides technical expertise in Information Security, Risk Management, and Audit for RCHSD under the Enterprise Architect and Information Security Officer (EA/ISO). The Sr. Information Security Engineer ('SISE') is responsible for development and implementation of risk management processes and disaster recovery planning for RCHSD Information Systems. The SISE is responsible for identification and remediation of information security risks. The SISE's duties include development and implementation of information security training and dissemination of security policies. The SISE is also responsible for developing and implementing processes for managing data security breaches and events for the management of those processes in the event of a security breach and events. The SISE accomplishes these objectives with the support of staff reporting to the EA/ISO, consultants, and/or in collaboration with the Information Management Division and other departments.

MINIMUM QUALIFICATIONS:

Must have a Bachelor's degree in Information Technology, Business Process Analysis or a related field is required. Relevant experience in excess of three (3) years of the minimum required in item B. below may be substituted for this requirement.

Ten (10) years general Information Technology experience is required.

Five (5) years of Information Security experience is required.

Knowledge of project management practices, principles and concepts are required.

Knowledgeable of risk management strategy development, case law analysis, regulatory and compliance (Sarbanes-Oxley, HIPAA, PCI, etc.) assessment needs, industry standards (ITIL, ISO 17799, NIST).

Demonstrated understanding of information security principles and practices, including program analysis, development and testing. Ability to understand business asset protection requirements and deliver cost-effective technical solutions.

Ability to communicate, present, influence, and collaborate with many disciplines, such as management, physicians, information systems specialists, health information specialists, financial managers, state and federal agency officials, and patients/clients or individuals upon whom the entity maintains or transmits individually identifiable health information.

PREFERRED QUALIFICATIONS:

Master's degree in Business or Health Administration preferred.
Security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) preferred.

Open Source tools background preferred.

Security technology trends, industry best practices, and security technology related to applications, networks, and infrastructure preferred.

Three (3) years in Information Technology management and some Health Care related background in Information Security preferred.

Experience in managing staff, including hiring, training and developing staff, assigning tasks, evaluation performance, etc. is preferred

Directory services management experience (Active Directory, LDAP) preferred

EOE/M/F/D/V