Information Security Administrator needs 5+ years of experience in information technology or information systems
Information Security Administrator requires:
• Bachelor’s degree computer science, IT or equivalent
• 5+ years of experience in IT or IS
• Experience with major standards such as: SOC 1-2, ISO 27001/2, PCI DSS, HITRUST, SANS, NIST
• Demonstrated experience in implementing compliance frameworks for financial services organization or organizations with similar information security needs and requirements
• Familiarity and understanding of broad range of IT hardware and software products
• Strong project management skills
• Certified Information Systems Security Profession (CISSP), PCI DSS, Certified HIPAA Privacy Security Expert (CHPSE), Certified Information Security manager (CISM), Global Information Assurance Certification (GIAC), or related.
• Experience or knowledge with healthcare or health insurance
• Knowledge of CMS and HIPAA related vendor requirements
• Working knowledge of Security SDLC tools
Information Security Administrator duties:
• Manage and utilize IS tools such as DLP, Code scanner, external security profile, etc. to analyze gaps in security controls
• Participate in the IT SDLC program to ensure that security is included in project by default and by design
• Develop strong working relationships with other departments and potentially clients across the organization to ensure a high degree of security compliance client satisfaction
• Brief IS leadership on vulnerability assessment results and potential risks
• Continue self-development of knowledge, skills and abilities to better support execution of the Information Security (IS) function