Director of Information Security - Birmingham, AL

Overview

NaphCare is hiring a Director of Information Security to join our team on-site full-time at our Corporate Headquarters in Birmingham, AL 35216.  This position is responsible for the oversight of the IT Security Program at NaphCare including the management, coordination and execution of specific IT security compliance activities following best practice and at the direction of NaphCare’s CTO. Hands-on knowledge of completing and maintaining SOC II certification.

 

This is a full-time position. No Visa sponsorships or transfers. 

 

The Primary job function of the position is to analyze and interpret pertinent IT Security Standards in which NaphCare must comply, perform ongoing gap assessments to identify and document deficiencies in systems and processes, and directly aide in addressing deficiencies.  The role will also be responsible for overseeing NaphCare’s IT Security Policies and System Security Plans for key software packages ensuring compliance. Finally, the role will manage ongoing audits of IT security both internal and those performed by 3rd parties and engage with NaphCare’s partners in aligning security goals and policies.

 

The role must have a clear understanding of the challenges of information security and possess excellent analytical and problem-solving abilities in order to identify and fix security risks through coordination across NaphCare’s Information Technology teams.

 

OUTSTANDING BENEFITS PACKAGE:

NaphCare offers competitive benefits, including health, prescription, dental, Employment Assistance Program (EAP) services, vision and 401(k). NaphCare offers term life insurance at no cost to the employee and provides PTO, paid holidays and an array of voluntary benefits. Employees enrolled in our health insurance program receive prescriptions free of charge when filled at our in-house pharmacy or mail order program.

If you want a career that will make a difference, choose the company that is different.  NaphCare professionals are important partners of the NaphCare family, working together to provide quality care in a rewarding work environment. We care about making a difference in the lives of others. 

Come learn correctional healthcare as you use our cutting-edge resources, including our award-winning electronic health record system. 

At NaphCare, we believe in innovating to improve lives. We partner with local, state and federal government agencies to provide innovative healthcare, technology and administrative solutions for complex problems within the correctional and justice systems. Our success has always been due to our people and our commitment to treating every patient with dignity. We are mission-driven with a singular aim of improving lives through caring health care solutions provided in an environment of respect. United by this belief, we work as a team to improve each and every life we touch.  Join our team of compassionate trailblazers who are dedicated to making a difference. 

 

Responsibilities

Assist the CIO, CTO, and IT Directors by serving as a subject matter expert working closely other departments to implement and monitor the cybersecurity program across the organization.

Direct activities supporting overall security and integrity of organizational electronic data, data systems, and data networks.

Direct the development and delivery of Information Technology security standards, best practices, architecture and systems to ensure data and information security.

Direct efforts to inventory information technology assets, document data flows and data privacy programs, manage change requests and monitor compliance with cybersecurity policies and best practices.

Ensure proper authentication, authorization, and accountability of on-premises systems, cloud resources and remote working environments.

Ensure proper provisioning, hardening, encryption, backup, updating and disposal of assets.

Ensure security of network infrastructure on-premises and in the cloud.

Ensure protection of sensitive, regulated data and intellectual property.

Lead efforts in identifying and remediating vulnerabilities.

Lead efforts in detecting, reviewing and responding to security events.

Lead security incident containment and investigations in cooperation with external resources.

Manage 3rd party vendors employed by NaphCare to aide in Security Stance (i.e. Incident Response Resources, Audit resources, etc.)

Qualifications

• EDUCATION: Must have a Bachelor's Degree in Information Security or closely related field (i.e. Cyber Security, Security Engineering, Management Information Systems
• CERTIFICATION: The following certifications or combination thereof are preferred - CISA (Certified Information Systems Auditor)