Job Summary

We are looking for a Data Security Architect. As part of the GRC team within Information Services department, the Data Security Architect will be responsible for facilitating risk management functions, and assessing controls in place to ensure confidentiality, integrity and availability of Texas Children’s IT ecosystem, and patient care. This position requires the ability to use industry frameworks / standards such as NIST, to develop and promote Information Security Strategic Plan, Information Security Policies, compliance with defined security policies, and lead remediation initiatives.

This role requires collaboration with departments outside of Information Services, to achieve compliance to regulatory and contractual standards such as HIPAA, PCI, JHACO, AFRMR etc. The individual will provide guidance on implementing preventative and detective controls, and assessing effectiveness of controls; facilitate internal / external assessments and audits; explain results, review findings and recommendations; and guide on remediation efforts. In addition, this role will support development of executive-level Cybersecurity reporting and metrics.

Think you’ve got what it takes?

Responsibilities

• Develop Security Policy and Provide Compliance Reporting.
• Develop Information Security Strategy. Coordinate Security implementations across IS Disciplines and user departments.
• Assists in implementation of processes and procedures for cybersecurity reporting and metrics activities
• Develop, review, update, and communicate IT security related policies and procedures
• Document, communicate, consult on enterprise wide Information risk management and data privacy policies, procedures, standards, and requirements.
• Provide guidance on implementing security and technical controls to mitigate risk to patient care and IT assets
• Outlines long-term technical security requirements assimilating governmental regulations, evolving technical threats, and IDS goals
• Perform tests and validation of in place controls
• Facilitate HHS and HIPAA security assessments
• Collaborate with Internal and External audit teams on various assessments and audits.
• Works with departments outside IS to achieve specific security compliance required for regulatory requirements (HIPAA, HHS, PCI, JHACO, etc.)
• Provide executive level reporting of controls, and compliance to security requirements.
• Develop executive-level reporting and metrics
• Coordinates proactively with stakeholders on metrics, reporting, and other tasks
• Advocate for security awareness and training. Manage complex customer interactions, regulatory changes, and innovations appropriately

Qualifications

Being fully vaccinated against COVID-19, including any booster dose(s) of the COVID-19 vaccine recommended by the Centers for Disease Control when eligible, is required for all employees at Texas Children’s, unless approved for a medical or religious exemption.

• H.S Diploma or GED and 11 years experience 
• Bachelor’s degree in computer science, information assurance or a related field with 7 years experience.
• 7 years’ experience in GRC and/or Information Security 
• CRISC, CISA, CISM or CISSP certifications highly desired
• Significant experience with SOX and/or MAR (AFRMR), NIST CSF, NIST RMF and/or COBIT
• A working knowledge of HIPAA and /or Texas Health and Humans Services regulatory requirements is highly desired
• Excellent oral and written communication skills
• Strong analytical skills and exceptional attention to detail

Company Profile

Since 1954, Texas Children’s has been leading the charge in patient care, education and research to accelerate health care for children and women around the world. When you love what you do, it truly shows in the smiles of our patient families, employees and our numerous accolades such as being consistently ranked as the best children’s hospital in Texas, and among the top in the nation by U.S.News & World Report as well as recognition from Houston Business Journal as one of this city’s Best Places to Work for ten consecutive years.

Texas Children’s comprehensive health care network includes our primary hospital in the Texas Medical Center with expertise in over 40 pediatric subspecialties; the Jan and Dan Duncan Neurological Research Institute (NRI); the Feigin Center for pediatric research; Texas Children’s Pavilion for Women, a comprehensive obstetrics/gynecology facility focusing on high-risk births; Texas Children’s Hospital West Campus, a community hospital in suburban West Houston; and Texas Children’s Hospital The Woodlands, the first hospital devoted to children’s care for communities north of Houston. We have also created the nation’s first HMO for children, established the largest pediatric primary care network in the country and a global health program that is channeling care to children and women all over the world. Texas Children’s Hospital is also academically affiliated with Baylor College of Medicine, one of the largest, most diverse and successful pediatric programs in the nation.

To join our community of 14,000 dedicated team members, visit texaschildrenspeople.org for career opportunities. You can also learn more about our amazing culture at infinitepassion.org. At Texas Children’s Hospital, diversity, equity, and inclusion are at the core of our values and mission for the women and children that we serve. We are committed to providing a diverse and inclusive work environment for all faculty, staff and learners throughout our organization. We believe that each member of our one amazing team provides enrichment that allows us to create a lasting legacy for future employees of this great organization. 

Texas Children’s is proud to be an equal opportunity employer. All applicants and employees are considered and evaluated for positions at Texas Children's without regard to mental or physical disability, race, color, religion, gender, national origin, age, genetic information, military or veteran status, sexual orientation, gender identity, marital status or any other protected Federal, State/Province or Local status unrelated to the performance of the work involved.