Mgr Information Security

Responsibilities

• Develop and execute a strategic information security roadmap, aligning security initiatives with business objectives and industry best practices.
• Lead and mentor a team of security analysts and engineers, fostering skill development and a culture of continuous improvement.
• Design and implement advanced security measures to safeguard the organization's infrastructure, applications, and data.
• Oversee security architecture design, ensuring the integration of robust controls across all technology layers.
• Collaborate with cross-functional teams to embed security principles into projects, technologies, and initiatives.
• Conduct regular security assessments, vulnerability assessments, and penetration tests to evaluate and address risks.
• Manage security tools, including SIEM, intrusion detection systems, and antivirus solutions.
• Develop and enforce information security policies, standards, and procedures, ensuring compliance with healthcare regulations (e.g., HIPAA).
• Lead incident response efforts, coordinating the investigation, containment, and recovery from security incidents.
• Provide guidance on security compliance, ensuring adherence to industry regulations and internal standards.
• Stay informed about emerging cybersecurity threats, vulnerabilities, and best practices.
• Collaborate with external partners, vendors, and regulatory bodies on security matters.
• Lead security awareness training and education programs for employees and stakeholders.
• Provide subject matter expertise in security discussions and strategic projects.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field (Master's preferred)
• OR 2 years of experience in risk analysis, information security, or a related field in the healthcare industry.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or equivalent.
• Minimum of 2 years of experience in information security, with significant experience in security management and team leadership.
• Deep knowledge of cybersecurity principles, technologies, and best practices.
• Strong understanding of networking concepts, operating systems, and security architecture.
• Proven experience in security architecture design, network segmentation, and access controls.
• Experience with security assessment tools, vulnerability scanners, and penetration testing methodologies.
• Extensive knowledge of healthcare regulations (e.g., HIPAA) and their application to security practices.
• Excellent leadership and team management skills, with the ability to mentor and develop security professionals.
• Strong communication and collaboration skills, with the ability to interact with technical and non-technical stakeholders.
• Track record of successfully driving security initiatives, compliance efforts, and incident response activities.

Benefits

INTEGRIS Health offers a comprehensive benefits package that includes:

• Front-loaded PTO
• Medical benefits through the extensive INTEGRIS Health network
• Financial assistance for continued education
• 24/7 mental health support

Pay

The salary range for this position is $100,000 - $150,000 annually, depending on experience and qualifications.

Schedule

This is a full-time position.

Company Overview

INTEGRIS Health, Oklahoma's largest not-for-profit health system, is committed to partnering with people to live healthier lives. We offer a wide range of services, including hospitals, clinics, and home health care, and are dedicated to providing high-quality care to our patients.