Become a part of our caring community and help us put health first
 

We are searching for experienced Data Protection Engineer who can utilize solid business knowledge and expert technical experience in data security to help develop control strategy, roadmap, and execution for our Data Protection program. As a Senior Cyber Data Protection engineer you will be accountable for executing security checks and data risk assessments, evaluating and assessing compliance for sensitive data based on public law, regulatory obligations, industry best practices and corporate risk tolerances for enterprise systems and applications. The Senior Data Protection Engineer work assignments are varied and requires the following:
• Solid understanding of a wide range of systems and infrastructure (Cloud IaaS, PaaS, SaaS, on-premises, etc.)
• Proficiency with data lifecycle management, data protection best practices and regulatory requirements for highly regulated healthcare IT systems.
• Proficiency with HIPAA, PCI-DSS, NACHA, TCPA and state level consumer privacy legislature is a plus.
• Understanding and ability to provide consulting on encryption requirements for data-at-rest and in-motion.
• Versed in reviewing IT security agreements with vendors and third parties for compliance with data risk obligations.
• The ability to follow established guidelines/procedures for sharing and transmitting protected and sensitive data types.
• Interpret and assess data flow diagrams, architecture diagrams and identity and access models for impacts to data security.
• Provide advice and assistance in the identification of data risk and risk mitigation capabilities and strategies to meet operational security targets and compliance.
• Operational understanding of local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices and use of public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures.
• Makes decisions regarding own work methods, occasionally in ambiguous situations, and requires minimal direction and receives guidance where needed.
• Participates committees, consortiums, and cross-function teams as required.

The Senior Cyber Data Protection Engineer will maintain strong partnerships with organizations such as Enterprise Architecture, Privacy, Legal, and Data Governance Office. Responsible for may also include strategy, compliance standards, architecture, configuration hardening, and oversight for the following:
• Data Loss Prevention
• Certificate Management
• Encryption
• Key Management
• Data Discovery and Profiling

The Senior Cyber Data Protection Engineer guides architects on embedding techniques like tagging, data anonymization while building or enhancing data solutions to ensure proper level of access and data classifications. Begins to influence department’s strategy. Makes decisions on moderately complex to complex issues regarding technical approach for project components, and work is performed without direction. Exercises considerable latitude in determining objectives and approaches to assignments.

The Senior Cyber Data Protection Engineer executes data security checks and data risk assessments, evaluates and assesses compliance for sensitive data based on public law, regulatory obligations, industry best practices and corporate risk tolerances for enterprise systems and applications. The Senior Cyber Data Protection Engineer work assignments are varied and requires understanding of a wide range of systems and infrastructure (Cloud, on-prem, SaaS).  Familiarity with data lifecycle management, data protection best practices and regulatory requirements for highly regulated healthcare IT systems.  Familiarity with HIPAA, PCI-DSS, NACHA, TCPA and state level consumer privacy legislature is a plus.  Understanding and ability to provide consulting on encryption requirements for data-at-rest and in-motion.  Familiar with reviewing IT security agreements with vendors and third parties for compliance with data risk obligations.  The ability to follow established guidelines/procedures for sharing and transmitting protected and sensitive data types. Can interpret and assess data flow diagrams, architecture diagrams and identity and access models for impacts to data security. The Senior Cyber Data Protection Engineer provides advice and assist in the identification of data risk and risk mitigation capabilities and strategies to meet operational security targets and compliance.  Operational understanding of local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices and use of public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures. Makes deci