Apply on Employer Site

The Christ Hospital Health Network · 2 months ago

Senior IT Security Vulnerability Management Engineer - CBO IT Security - Full-Time- Days

Cincinnati, OH

Full-time

Onsite

Senior Level

5+ years exp

The Christ Hospital Health Network is a pioneer in exceptional healthcare in the Greater Cincinnati community. They are seeking a Senior IT Security Vulnerability Management Engineer to support the Information Security department by managing risks, ensuring compliance, and promoting security awareness throughout the organization.

Health CareHospitalMedical

H1B Sponsor Likely

Responsibilities

Tracks and manages information security risks and identifies information security vulnerabilities and facilitates required remediation activities

Perform risk and security impact analysis to address compliance with applicable laws, regulations, requirements and to effect positive financial security investments

Manage or facilitate compliance audits and or investigations

Designs and implements internal controls/standards & procedures that ensure compliance with security standards that meet existing regulatory security requirements

Contributes to the development of policies and standards as needed to reflect evolving TCHHN needs

Coordinates and conducts internal security audits to ensure the effectiveness of TCH’s security parameters

Participates and advises in TCHHN risk programs

Ensures the confidentiality, integrity and availability of current information systems appropriately utilizes resources to protect data (HIPAA/HITECH/PCI/PII, etc.)

Implement commercially reasonable information security solutions in line with business goals and strategies

Resolves operational conflicts that arise between projects and daily operations

Manage stakeholder expectations, understand business priorities and communicate security approaches and or requirements appropriately

Implement approved service requests according to standard procedures

Review change requests with information security impact and provide direction

Execute changes in a controlled, organized manner following established change management processes

Manage, monitor, execute security operational tools to include (but not limited to): Intrusion Prevention Systems/next generation firewall, Web Content Filter, Advanced Persistent Threat systems and analysis, Forensic toolsets, Advanced next generation anti-virus & malware toolsets, Email security virtual appliances, Logging/Monitoring/Incident Detection systems

Monitoring and executing routine information security processes and tickets

Manage information security incidents and problems to agreed service levels

Monitoring KPI’s on a continuous basis to ensure information security controls meet business needs

Ensures that technology projects are properly planned, managed, and executed

Mentoring security team members as assigned

Ability to establish work standards, prioritize and deliver on key initiatives

Assist in the development of awareness training and communication programs to effectively communicate company security and privacy policies

Fosters a service oriented atmosphere of teamwork between the business and IT

Must be a professional of unquestionable integrity, credibility, business ethics and character

Must be self-directed, take ownership & responsibility and ensure high quality output

Outstanding communication skills with a demonstrated ability to connect with people on business needs, infrastructure issue resolution and projects

Communicates with team in order to convey risk related to specific lines of business within the Hospital and that deal with legal, compliance, personnel security, public relations and other issues directly tied to security risk

Performs project management functions as needed or required

Stays current on HIPAA, HITECH, PCI and other relevant security regulations

Performs other duties as necessary or assigned by the Chief Information Security Officer and Executive Management

Qualification

Information SecurityRisk ManagementCompliance AuditsSecurity ArchitectureIncident ManagementThreatVulnerability ManagementConfiguration ManagementChange ManagementHealthcare ITProject ManagementSelf-directedEthicsCommunicationTeam CollaborationPresentation SkillsDocumentation SkillsIntegrity

Required

Bachelor of Science degree in business/technical discipline

Five (5) plus of related professional security experience

Information Security

Information Technology

Project Management

Business or Security Informatics

Audit & Assurance

Enterprise Risk Management

Corporate Compliance

Security Architecture/design strategy

Compliance readiness assessments

Configuration Management

Change Management

Incident Management

Threat and Vulnerability Management

IT Security Management

Project Management

Experience and working knowledge of NIST 800-53 (current revision), risk frameworks and risk analysis

Experience implementing and monitoring Key Risk Indicators (KRI's) and continuous process improvement methodologies

Experience in healthcare information technology delivery processes

The candidate must be business aligned in terms of their approach to IT strategy and operations

Thorough knowledge of multi-platform processing and health, availability and performance monitoring tools used for managing an IT infrastructure; including but not limited to: network components, distributed systems, storage area networks, security, asset configurations, applications, databases, etc

Ability to manage several projects and tasks simultaneously

Excellent communication, presentation and documentation skills required

CISSP

CRISC

CISA

HCISSP or CHSP (or relevant healthcare security certification)

Preferred

Customer Insight

Collaboration Across Businesses and Borders

Initiates and Leads Change

Accountable for Driving Results

Makes Timely and Informed Decisions

Ability to Take Risks

Company

The Christ Hospital Health Network

Glassdoor3.5

The Christ Hospital Health Network is a healthcare system that provides intensive care, wellness and speciality services.

Founded in 1889

Cincinnati, Ohio, USA

5001-10000 employees

https://www.thechristhospital.com/

H1B Sponsorship

The Christ Hospital Health Network has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (1)