What are the responsibilities and job description for the INFORMATION SECURITY ADMINISTRATOR position at Carson Tahoe?
Description
US : NV : Carson City Information Technology
Full Time Day Shift
About Carson Tahoe Health
CTH is a not-for-profit healthcare system with 240 licensed acute care beds, fully accredited by the Center for Improvement in Healthcare Quality (CIHQ). CTH was voted 5th most beautiful hospital in the nation nestled among the foothills of the Sierra Nevada in North Carson City and only a short drive away from world-famous Lake Tahoe & Reno. We serve a population of over 250,000 and feature two hospitals, two urgent cares, an emergent care center, outpatient services and a provider network with 19 regional locations.
Summary
Under the direction of the IT Manager of Infrastructure and Operations, the Information Security Administrator oversees Carson Tahoe Health's information, cyber, and technology security. This role is responsible for the day-to-day administration of information security tools and devices, as well as support for security information and event management (SIEM), for both desktop and network infrastructure. The Information Security Administrator is responsible for supporting computer network defense, including auditing the network for vulnerabilities, identifying relevant threats, recommending corrective actions, investigating security incidents and breaches, and developing and implementing solutions for security issues. This role also focuses on developing documentation pertinent to information security management while also supporting processes that ensure compliance with annual security audits. The Information Security Administrator is an acting member of the Incident Response Team and participates in the maintenance of the IT Incident Response Management Plan.
Responsibilities
o Participates in the development, documentation, implementation, and monitoring of a strategic, comprehensive enterprise information security and IT risk management program.
o Supports the development and enhancement of the CTH information security management framework, and monitors said framework by reviewing security logs and violation reports.
o Analyzes and remediates vulnerabilities. Consistently is aware of any unusual activity and reacts swiftly to prevent or mitigate breaches.
o Participates in the definition of security procedures regarding malware in the company's information technology assets, including administration of anti-malware software and firewall policies.
o Provides technical advice on access control, security models, disaster recovery, IT incident response, business continuity planning and security awareness training.
o Plans, implements, monitors, and troubleshoots internal information technology security policies, application security, access control, and corporate data safeguards.
o Performs network scanning and vulnerability assessments.
o Analyzes and defines security requirements for local and wide area networks.
o Updates secure configurations by routinely reviewing vendor sites, bulletins, and notifications for security information.
o Ensures the confidentiality, integrity and availability of the data residing on or transmitted to / from / through workstations, servers, databases and other hospital systems.
o Supports the design and execution of vulnerabilities assessments, penetration tests and security audits; works with IT Technical Services in the remediation of audit findings.
o Supports the implementation of controls and configurations aligned with security policies and legal, regulatory and audit requirements.
o Participates in root cause analysis of critical events for improving preventative and reactive processes.
o Participates in annual risk assessment, security audit and incident response plan (IRP).
o Participates in the Technical Estimation Team to ensure new applications or systems introduced to CTH are aligned with and adhere to information security policies and processes.
o As necessary, supports the essential functions of the System Administrator IT team.
o Performs other related duties as assigned.
Qualifications
Required
o Bachelor degree in information security management, information technology systems, healthcare administration, or related field OR equivalent combination of education and progressive work experience in healthcare information technology.
o A minimum of three (3) years of previous experience working in a enterprise-grade technical environment with Microsoft, Linux, and Unix operating systems.
o A minimum of three (3) years of previous experience with :
o Enterprise-grade backup systems
o Enterprise-grade datacenter architecture and design, including power, equipment installation and cabling
o Enterprise-grade system redundancy and fault tolerance
o Enterprise-grade storage systems
o Server virtualization
o Information technology security systems
o Ability to convey technical concepts to a non-technical audience.
o Exceptional written, verbal and interpersonal skills essential to establish and maintain good working relationships with both technical and non-technical staff, including the ability to communicate well with a wide variety of users, of differing levels of IT skills.
Preferred
o One or more technical security certifications such as CISSP, CISM, OSCP, or CEH
Top 5 Reasons to Live in Carson City, Nevada
- Live, work and play in one of the most beautiful regions in the world
- Enjoy an array of outdoor activities world class skiing, golf, camping, mountain biking, hiking, water skiing, kayaking, hunting and fishing
- Just next door is Beautiful Lake Tahoe
- We are minutes from Reno known as the 'biggest little city in the world' - Fine dining, nightlife, shopping and home to the University of Nevada Reno.
- Family friendly atmosphere with affordable housing & excellent school system
Our Benefits
