Information Security Architect

At Houston Methodist, the Information Security Architect position is responsible for designing, building, testing and implementing systems within the Houston Methodist IT network. The Information Security Architect prepares security standards and recommends updates to security policies and procedures. Serves as a mentor to more junior team members . Develops and maintains the high-level plan for the overall logical and technical architecture of the enterprise security postures. The Information Security Architect provides technical leadership and consulting across the organization including strategic recommendations and project planning. The Information Security Architect gains organizational commitment for information security plans, initiates and participates in projects related to information security and leads associated implementations and upgrades.

FLSA STATUS

Exempt

QUALIFICATIONS

EDUCATION

• Bachelor's degree required, preferably in cyber security, computer science, information systems or computer engineering

EXPERIENCE

• Seven years experience in Information Technology to include five years experience in information security.

LICENSES AND CERTIFICATIONS

Preferred

• CISSP - Certified Information Systems Security Professional (IISSCC) and
• Certified Ethical Hacker (CEH)

SKILLS AND ABILITIES

• Demonstrates the skills and competencies necessary to safely perform the assigned job, determined through on-going skills, competency assessments, and performance evaluations
• Sufficient proficiency in speaking, reading, and writing the English language necessary to perform the essential functions of this job, especially with regard to activities impacting patient or employee safety or security
• Ability to effectively communicate with patients, physicians, family members and co-workers in a manner consistent with a customer service focus and application of positive language principles
• Expert understanding of network security, network hardware configuration, network protocols, network standards supervision
• Ability to communicate effectively to all level of the organization and translate technical language to non technical audiences
• Ability to partner across the organization to drive security strategies that support business goals and objectives
• Strong business acumen
• Strong understanding in mobile device security management to include the configuration and administration of mobile manager applications if assigned to mobile security

ESSENTIAL FUNCTIONS

PEOPLE ESSENTIAL FUNCTIONS

• Gains organizational commitment for IT Security plans.
• Communicates effectively (oral and written) throughout the organization to cultivate a culture of security awareness and support ongoing education to support security awareness and adherence.
• Serves as a mentor to more junior team members and assists with training through formal and informal methods.

SERVICE ESSENTIAL FUNCTIONS

• Reviews current system security measures and recommends and implements enhancements.
• Implements security systems by specifying intrusion detection methodologies and equipment. Oversees security equipment and software installations and configurations.
• Partners with Security Analysts to ensure prompt response to security incidents. Provides thorough post-event analyses.
• Evaluates network and security technologies. Develops requirements for local area networks (LANSs), wide area networks (WANs), virtual private networks (VPNs) routers, firewalls and related security and network devices.

QUALITY/SAFETY ESSENTIAL FUNCTIONS

• Conducts regular system tests and ensures continuous monitoring of network security.
• Makes recommendations regarding system access based on need and role.
• Establishes security procedures and conducts cyber incident response drills.

FINANCE ESSENTIAL FUNCTIONS

• Prepares system security reports by collecting, analyzing and summarizing data and trends to ensure timely and cost effective project timelines for systems implementation and upgrades
• Evaluates new security tools and negotiates purchase agreements.

GROWTH/INNOVATION ESSENTIAL FUNCTIONS

• Proactively stays up to date on the latest security standards, authentication protocols and best practice security products. Shares information and trains members.
• Maintains in-depth knowledge of organizational strategic priorities.
• Proactively manages own professional development. Completes Individual Development Plan (IDP).

SUPPLEMENTAL REQUIREMENTS

WORK ATTIRE

• Uniform: No
• Scrubs: No
• Business professional: Yes
• Other (department approved): No

ON-CALLNote that employees may be required to be on-call during emergencies (ie. Disaster, Severe Weather Events, etc) regardless of selection below.

• On Call* Yes

TRAVELTravel specifications may vary by department

• May require travel within the Houston Metropolitan area Yes
• May require travel outside Houston Metropolitan area Yes

QUALIFICATIONS

EDUCATION

• Bachelor's degree required, preferably in cyber security, computer science, information systems or computer engineering

EXPERIENCE

• Seven years experience in Information Technology to include five years experience in information security.

LICENSES AND CERTIFICATIONS

Preferred

• CISSP - Certified Information Systems Security Professional (IISSCC) and
• Certified Ethical Hacker (CEH)

Company Profile:

Houston Methodist is one of the nation's leading health systems and academic medical centers. The health system consists of eight hospitals: Houston Methodist Hospital, its flagship academic hospital in the Texas Medical Center, seven community hospitals and one long-term acute care hospital throughout the Greater Houston metropolitan area. Houston Methodist also includes a research institute; a comprehensive residency program; international patient services; freestanding comprehensive care clinics, emergency care and imaging centers; and outpatient facilities. Come lead with us!

Houston Methodist is an Equal Opportunity Employer.