The Sr.
Information Security Architect is a senior level technical role within Adena Health System's Enterprise Security Department responsible for the design, implementation, maintenance, and monitoring of Adena's Security Architecture.
This role encompasses the entire security architecture lifecycle by (1) documenting a security architecture baseline that integrates seamlessly within the IT Enterprise Architecture, (2) aligning standards, frameworks, and security with business requirements and the Information Security strategy, (3) designing, building, and implementing enterprise level security systems in the production IT environment, (4) developing new security architecture elements which mitigate emerging threats, (5) identifying security design gaps in proposed, existing, and pre-production architectures and recommend changes or enhancements to this architecture, and (6) making adjustments to the baseline security architecture as regulations, standards, frameworks, and technology change.
From a business continuity perspective, this position must understand business processes and translate those into resilient elements that integrate into the security architecture as well as business continuity plan.
Job Duties & Responsibilities:
Develops and maintains the security architecture baseline.
Develop sub-architectures, techniques, coded solutions, and/or recommend software/tools to improve the holistic security architecture and make information security tasks/processes more efficient.
Applies expert level knowledge in Information Security principles, Information Security frameworks, security architecture frameworks, network security, operating systems, virtualization, storage systems, database management systems, malicious code uses, secure coding techniques, Internet of Things (IoT), and common techniques used by hackers to new technology reviews within the IT Architecture Review Board.
Regularly leads analysis of a security architecture gap.
Documents and rates identified risks.
Architects, designs, configures, implements, troubleshoots, tests, and monitors detective, preventive, and corrective security controls designed to minimize organizational risk.
Ability to manage complex issues and develop creative solutions.
Reports anomalies/risks to management.
Develop comprehensive reports including assessment-based findings, outcomes, and recommendations for risk mitigation.
Develop, document, and continuously maintain standard operating procedures, protocols, IT Configuration Standards, etc.
Support the investigation and resolution of security incidents.
Participates in 24x7 on-call rotation with team.
Documents and communicates key metrics to management for inclusion into the Enterprise Security dashboard.
Documents and communicates key metrics to management for inclusion into the Enterprise Security dashboard.
Provides regular updates to essential business continuity documentation (IT Disaster Recovery Plan, Business Impact Analysis, and Incident Response Plan).
Required Educational Degree:
Bachelor's Degree
Major/Area of Concentration:
Computer Science
Preferred Education:
Master's Degree
Certifications
CISSP - Certified Information Systems Security Professional
CISSP-ISSAP - Information Systems Security Architecture Professional
Experience
10+ years previous Information Technology and/or Information Security work experience (without a college degree).
5-7 years Previous experience in a healthcare environment.
Whatsapp
