Apply on Employer Site

HealthInfoNet · 5 days ago

Information Technology Security Specialist

New Gloucester, ME

Full-time

Onsite

Mid Level

3+ years exp

HealthInfoNet is dedicated to improving patient outcomes through information technology, and they are seeking an IT Security Specialist to enhance their security measures. The role involves ensuring the integrity, confidentiality, and availability of organizational information and performing various security-related tasks such as risk assessments and security audits.

Data Center AutomationData IntegrationData Management

Responsibilities

This position is accountable for procedures and processes that ensure the integrity, confidentiality and availability of organizational information, applications and infrastructure

The position will perform tasks associated with the configuration, testing and implementation of various security controls across all security domains, such as access management, encryption, vulnerability management, authentication, authorization, network security, and physical security

The IT Security Specialist will perform routine risk assessments, security audits, and vulnerability scans to identify, evaluate, document and remediate organization risk, control gaps and vulnerabilities

This position will be responsible for developing security reports, security recommendations, and security policies and procedures

The IT security analyst will facilitate the investigation, isolation, documentation and timely resolution of security incidents and breaches working closely with other IT team members and vendors

Qualification

IT SecurityNIST security controlsRisk assessmentTechnical certificationsSecurity auditingAnalytic skillsCommunication skillsWriting skillsProject managementTeam collaboration

Required

Four (4) year degree in Information Systems, Information Technology, Cybersecurity or equivalent field

Three (3) years of experience in IT Security, HIPAA Security or Security Auditing

Knowledge and understanding of NIST security controls across all security domains, such as access management, encryption, vulnerability management, authentication, authorization, network security, physical security, etc

Ability to identify security risks in applications, system, and network architecture, data flow, and processes or procedures

Ability to assess the organizational impact of identified security risks and recommend solutions or mitigating controls

Knowledge of security technologies, security frameworks, devices, hacking techniques, and countermeasures, as well as the threats they are designed to counter

Strong analytic and communication skills

Excellent writing skills

Strong project management

Ability to work both independently and collaboratively; build a positive team culture

Responsibilities may sometimes require working evenings and weekends, sometimes with little advanced notice

Ability and availability to work/network from home