GENERAL SUMMARY OF DUTIES: 

Promote an innovative, forward thinking culture to develop, implement and monitor a strategic, comprehensive enterprise cyber security program. Responsible for cyber incident response, monitoring, threat assessment/mitigation, cyber systems architecture design and implementation while advancing enterprise cyber security capabilities.

SUPERVISION RECEIVED:

Reports to the Cybersecurity Manager

SUPERVISION EXERCISED:

None

ESSENTIAL FUNCTIONS:

• Understand technology disciplines which include but are not limited to, endpoint security, data loss protection, firewalls, intrusion detection and intrusion prevention, application and system scanning tools, log collection and monitoring
• Responds to and investigates all security alerts from configured alert systems.
• Supports multiple systems and applications of medium to high complexity with multiple concurrent users, ensuring control, integrity and security, and accessibility.
• Participates in short- and long-term planning efforts with stakeholders and IT groups.
• Participates in business requirement meetings as necessary.
• Integrates solutions with other applications and platforms based on engineering requirements.
• Develops new alerts and monitoring techniques based on engineering requirements.
• Coordinates changes across multiple systems.
• Forecasts utilization patterns and identifies modifications and upgrades.
• Reviews security reports.
• Performs system reviews periodically with users and vendors.
• Coordinates problem resolution among a variety of functional areas and provides subject matter expertise supporting diagnosing and resolving problems.
• Reports security issues when appropriate and gathers required information.
• Makes recommendations to improve security and participates in investigations as needed.
• Ensures adherence to security requirements.
• Assists in developing documentation for new cybersecurity solutions and ensures documentation is maintained.
• May communicate, consult, and coordinate across multiple stakeholder groups.
• Responds to and manages tickets assigned in trouble ticketing/request system.
• Other duties/responsibilities as assigned.

EDUCATION:

Bachelor’s degree in Computer Science, Information Technology, Computer Business Systems or a Healthcare related field with a significant technical component. Significant and relevant work experience and/or technical certification can be substituted for education on a year-for-year basis.

EXPERIENCE:

5+ years of relevant experience deploying and/or administering cybersecurity solutions, preferably in a clinical setting, and preferably in a large ambulatory physician practice.

REQUIREMENTS:

Relevant technical certifications are preferred. Requires strong knowledge of and experience with multiple enterprise security solutions to include SIEM, E-mail Gateways, Firewall, Multi-Factor authentication, IDS, IPS.

All IT team members are entrusted with significant rights to sensitive data, including corporate financial and business data as well as patient protected health information (PHI). The privacy and security of patient data is guaranteed under the provisions of the Health Insurance Portability & Accountability Act (HIPAA) of 1996. Therefore, IT team members are expected to have a good working knowledge of the HIPAA Privacy and Security Rules. IT team members are expected to exemplary practitioners of all PHC policies pertaining to privacy and cybersecurity and resources for other PHC team members to consult with questions about privacy and cybersecurity best practices.

KNOWLEDGE AND SKILL REQUIREMENTS:

• Excellent customer service skills
• Ability to work independently and as part of a team
• Good written and verbal communications skills
• Good project management skills
• Ability to build relationships and trust with internal customers

ENVIRONMENTAL/WORKING CONDITIONS:

Most work will occur in an office setting, computer facility, and clinical offices. Local travel is required. Minimal exposure to communicable diseases is possible.

PHYSICAL/MENTAL DEMANDS:

Standing and sitting for long periods while doing computer input and responding to phone questions are likely. Must have ability to bend, stoop, twist and work with computer equipment. Occasional stress in working with tense users and multiple tasks is likely.