Sign upLog in
See more jobs

Information Security Consultant

Dale Workforce Solutions
  • Philadelphia, PA
  • Instant Apply
Today

Job Description

Client: large hospital system in Philadelphia
Location: hybrid- based in University City Philadelphia
Duration: 1 year + extensions

Job Summary:
  • Demonstrates specialized & comprehensive knowledge in Information security management practices, disciplines, regulations, industry standards, related frameworks, project management principles, and methodologies, security engineering concepts, security operations model; industry standards around architecture principles.
  • Demonstrates exceptional skills in managing multiple projects and priorities in order to meet strategic goals and timelines.
  • Exhibits the ability to plan, manage and implement highly complex enterprise architecture and security implementations, enhancements or modifications that require in-depth knowledge across multiple technical areas and business segments.
  • Exhibits exceptional understanding of emerging regulatory and healthcare issues in order to develop internal and external checks and controls to ensure proper governance, security and quality of information assets.
  • Demonstrates exceptional troubleshooting and collaborative skills required to identify, analyze and resolve complicated security issues.
  • Demonstrates advanced proficiency in creating detailed documentation, perform budget planning and oversight, and providing input on the infrastructure strategic planning, technology standards, and information security and risk practices.
  • Exhibits ability to communicate effectively with clients, colleagues, vendors, management and the ability to translate complex technical solutions into non-technical requirements documents.
  • Performs planning, development, implementation, and delivery of enterprise architecture and engineering principles for new, existing and future strategic and operational activities.
  • Demonstrates the ability to provide technical expertise and consultation to the CIO, CTO, CISO, executive leadership and other business and clinical leaders.

Job Functions:
  • A Principal Information Security Specialist has similar responsibilities to Information Security Specialist III personnel. However, a Principal Information Security Specialist is deemed to be the subject matter expert and in-house advisor on complex problems and issues.
  • Works independently to initiate assignments and draws upon extensive professional knowledge and experience to make independent judgments regarding analysis, evaluation, development, and implementation of enterprise long-term solutions and operating initiatives to ensure that enterprise architectural objectives are aligned with organizational needs and strategic goals.
  • Optimizes information management approaches through an understanding of evolving business needs and technology capabilities and ensures that projects do not duplicate functionality or diverge from each other and business and IT strategies.
  • Shapes, designs, and plans specific service lines in product area and manages the risks associated with information and IT assets through appropriate standards and security policies.
  • Functions as the Subject Matter Expert (SME) to maintain an understanding of the IS business and clinical applications and the relationship to InfoSec and compliance solutions; assist Hospital stakeholders in understanding information protection needs that support the Hospital's business.
  • Works with other architects to provide a consensus based enterprise solution that is scalable, adaptable and in synchronization with ever changing business needs and takes ownership of a particular solution offering.
  • Works with highly matrixed team of IS personnel to support enterprise architecture and information security operations including, but not limited to, architecture and InfoSec principles around identity & access management models, cloud identify management providers, security information and event monitoring, and data loss prevention, perimeter (e.g. firewalls, IPS, web filtering), cloud and virtualization environments and network security (host-based firewalls, anti-virus, disk encryption).
  • Support and/or lead activities around InfoSec standards for business continuity and change management activities (e.g., table tops and change review board) and educates IS Hospital management on security issues (e.g., Identity and Access Management (IAM), Role Based Access Control (RBAC) models.
Skills:
  • Demonstrates comprehensive knowledge and understanding of Information security principles, general and IT controls (e.g., access controls, risk management, change management, cloud security) and related information security policies and procedures.
  • Exhibits knowledge of industry regulatory standards and accreditation requirements or control frameworks (HIPAA, PCI, Joint Commission, NIST, Red Flags, ISO 27000 series).
  • Comprehensive knowledge of information security regulations, standards and leading practices, including understanding of EHR, cloud frameworks, identity access controls.
  • Good knowledge of basic database query techniques & data mining to analyze data or other related database functionality.
  • Knowledge of Microsoft Active Directory, UNIX, and Clinical Applications a plus.
  • Experience implementing application level security in clinical and financial systems (e.g., Epic, Lawson). ERP experience a plus.
  • General understanding of networking and communication techniques including WANs, LANs, Internet, Intranet, protocols, such as TCP/IP and their impact on security.
  • Microsoft, UNIX, Lawson, and Clinical Applications,
  • Experience with industry standard SDLC methodologies; hands-on experience in Project Server methodologies, PMO project management skills, including use of MS productivity tools (Access, Word, PowerPoint, Visio, Project).
  • Experience with risk management frameworks.
Information Security Requirements:
  • Understand and comply with all enterprise and IS departmental information security policies, procedures and standards.
  • Support the integration of information security in the development, design, and implementation of Hospital Technology Resources that process, transmit, or store company information.
  • Support all compliance activities related to state, federal regulatory requirements, healthcare accreditation standards, and all other applicable regulations that govern the use and disclosure of patient, financial, or other confidential information.
Education:
Required:
  • Bachelor's Degree
Preferred:
  • Bachelor's Degree in Computer Science, Information Systems, or related field
Required Experience:
  • At least twelve (12) years industry related experience, including experience in one to two IT disciplines (such as technical architecture, network management, application development, middleware, information analysis, database management or operations) in a multitier environment.
  • At least six (6) years experience with information security, regulatory compliance and risk management concepts.
  • At least three (3) years experience with Identity and Access Management, user provisioning, Role Based Access Control, or control self-assessment methodologies and security awareness training.
  • Experience with Cloud and/or Virtualization technologies.
Preferred Experience:
  • At least three (3) years in working with matrixed high performance teams.

Numbers & Facts

LocationPhiladelphia, PA

Skills

  • Access Controlunmatched
  • Accreditation Standardsunmatched
  • Analysis Skillsunmatched
  • Antivirusunmatched
  • Applications Securityunmatched
  • Budget Managementunmatched
  • Business Continuity Planning (BCP)unmatched
  • Business Strategyunmatched
  • Change Managementunmatched
  • Clinical Information Systemsunmatched
  • Cloud Computingunmatched
  • Communication Skillsunmatched
  • Computer Scienceunmatched
  • Computer Securityunmatched
  • Content Filtering Softwareunmatched
  • Cryptographyunmatched
  • Data Analysisunmatched
  • Data Miningunmatched
  • Data Qualityunmatched
  • Database Administrationunmatched
  • Documentationunmatched
  • ERP (Enterprise Resource Planning)unmatched
  • Enterprise Architectureunmatched
  • Enterprise Protectionunmatched
  • Epic Systemsunmatched
  • Federal Laws and Regulationsunmatched
  • Financial Systemsunmatched
  • Firewallsunmatched
  • HIPAA (Health Insurance Portability and Accountability Act)unmatched
  • Healthcareunmatched
  • Hospitalunmatched
  • Hospital Administrationunmatched
  • Hospital Systemsunmatched
  • ISO (International Organization for Standardization)unmatched
  • Identify Issuesunmatched
  • Identity Data Managementunmatched
  • Industry Standardsunmatched
  • Information Assetsunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Intranetunmatched
  • Intrusion Prevention Systemsunmatched
  • Leadershipunmatched
  • Local Area Network (LAN)unmatched
  • Loss Preventionunmatched
  • Maintain Complianceunmatched
  • Management Strategyunmatched
  • Medical Record Systemunmatched
  • Microsoft Access Databaseunmatched
  • Microsoft Active Directoryunmatched
  • Microsoft PowerPointunmatched
  • Microsoft Product Familyunmatched
  • Microsoft Visiounmatched
  • Microsoft Wordunmatched
  • Middlewareunmatched
  • Multitaskingunmatched
  • Needs Assessmentunmatched
  • Network Architecture/Engineeringunmatched
  • Network Management Softwareunmatched
  • Network Securityunmatched
  • Operational Strategyunmatched
  • PCIunmatched
  • Problem Solving Skillsunmatched
  • Project/Program Managementunmatched
  • Regulationsunmatched
  • Regulatory Requirementsunmatched
  • Riskunmatched
  • Risk Managementunmatched
  • Risk Management Framework (RMF)unmatched
  • Security Architectureunmatched
  • Security Information and Event Management (SIEM)unmatched
  • Security Monitoringunmatched
  • Software Developmentunmatched
  • Software Development Lifecycle (SDLC)unmatched
  • State Laws and Regulationsunmatched
  • Strategic Planningunmatched
  • TCP/IP (Transmission Control Protocol/Internet Protocol)unmatched
  • Team Playerunmatched
  • Technical Writingunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • Unix Operating Systemsunmatched
  • Virtualizationunmatched
  • Wide Area Network (WAN)unmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder