What are the responsibilities and job description for the Information Security Architect position at UAB Medicine?
Compensation:
Pay Range: $126,470 - $205,515/year
- Benefits available for eligible positions include: 100% tuition assistance, wellness initiatives, generous paid time off, paid parental leave, Public Service Loan Forgiveness Program eligible employer, plus more. In addition to our many benefits and perks, UAB Medicine provides a variety of resources to support employees both personally and professionally.
Job Highlights:
A team of more than 400 professionals, Health System Information Services (HSIS) works to keep UAB Medicine’s IT systems and infrastructure running smoothly to deliver quality care to our patients. Join our nationally ranked team at UAB Medicine, the No. 1 Best Large Employer in 2021 as ranked by Forbes magazine.
Work with the Best at UAB Medicine:
UAB Medicine is Alabama’s largest single-site employer and operates over 1,200 beds and over 200 clinics in Birmingham, Alabama. When you become part of UAB Medicine, you join a nationally ranked academic medical center committed to education and advancing medical science through research.
- U.S. News & World Report's Best Hospitals, #1 in Alabama
- America’s No. 1 Best Large Employer, Forbes, 2021
- Level I Trauma Center
- NCI-Designated Comprehensive Cancer Center, Comprehensive Transplant Institute, Comprehensive Stroke Center
Our success in patient care, innovation, and education is a direct result of our supportive and inclusive culture. Whether you are looking to start your career, fast-track your development, or diversify your skills, UAB Medicine offers avenues for advancement that other employers cannot match.
Duties
To independently employ a broad knowledge of principles, practices, and procedures in a particular field of specialization to plan, design, develop and support systems and projects. To conduct research and analysis and presents findings for review. To carry out complex assignments requiring the development of new or improved techniques and procedures. This position will commit to fostering an environment of heightened security following Information Technology Security Policies and participating in security training, such as Health Insurance Portability & Accountability Act (HIPAA) and Family Education Rights and Privacy Act (FERPA), on an annual basis.
Qualifications
Qualifications
Bachelor's degree in Information Systems or a related field and six (6) years of related experience required. Work experience may substitute for education requirement. Certified Information Systems Security Professional (CISSP) certification preferred.
PREFERRED SKILLS:
One of the following certifications preferred:
· CISSP
· CCNA
· CEH, OSCP, GPEN
Experience with 1 or more of the items outlined below in a Healthcare setting preferred:
· Network Security
o Working knowledge of TCP/IP, HTTP, SSL, SSH and other networking protocols
o Managing network security tools such as IPS, Firewall, SASE, etc….
o Reviewing firewall requests to determine risk to organization
o Managing network configuration tools such as
· Cloud Security
o Data protection policies
o CASB Administration
o Baseline Configuration (Conditional Access policies, NIST, CIS Benchmarks, Vendor best practices)
o Support the development and execution of enterprise-wide Cloud security program
· Application Security
o Managing application security scanners (DAST, SAST)
o Familiarity with software security frameworks (OWASP, NIST, BSIMM, OpenSAMM, etc…)
o Experience performing application security assessments that involve threat modeling and security testing
· Security Architecture
o Performing technical risk assessments on new and existing systems in the environment
o Providing security configuration recommendations to network and infrastructure architects
o Developing security policies for cloud infrastructure
o Assisting with the implementation of a cybersecurity framework (NIST Cyber Security Framework, CIS top 20, etc.)
· IoT Risk management
o Maintaining passive scanners to discover IoT and biomedical devices on the network
o Referencing MDS2 documents from vendors to determine risk
o Providing remediation plans for biomedical device vulnerabilities
- Provide Biomed with architecture guidance on implementation of medical devices
- Contribute to maintaining medical device asset inventory and associated collection of security information
Why Work at UAB Medicine
We are UAB Medicine, Alabama’s largest and most comprehensive health system, recognized nationally for delivering world-class patient care, pioneering research, and cutting-edge medical education. We proudly serve more than 1.2 million patients each year – from every county in Alabama, all 50 states, and many countries around the world. Our network spans numerous hospitals, emergency departments, more than 67 other sites of care, and a team of over 3,100 physicians. Our key facilities include UAB Hospital – ranked the No. 1 hospital in Alabama by U.S. News & World Report and home to the state’s first ACS-verified Level I adult trauma center and only Magnet-designated hospital – along with UAB Hospital-Callahan Eye and five UAB St. Vincent’s hospitals serving central Alabama.
UAB Medicine offers careers across a wide range of practice environments, from our internationally renowned academic medical center and award-winning community hospitals to our primary and specialty care clinics across the state. Whether you’re seeking the fast-paced learning environment of a tertiary care setting or the close-knit environment of a community facility, there’s a place for you on our team where you can become part of a mission-driven organization committed to delivering life-changing care. With nearly every medical specialty represented and unlimited opportunities for growth, you’ll find the right fit for your skills and career goals. We care for you by offering comprehensive, industry-leading benefit packages to support the individual preferences and circumstances of our diverse staff.
Salary : $126,470 - $205,515