IT Security Administrator III -FT

Work Shift:

Capital Health is the region's leader in providing progressive, quality patient care with significant investments in our exceptional physicians, nurses and staff, as well as advance technology. Capital Health is a five-time Magnet-Recognized health system for nursing excellence and is comprised of 2 hospitals. Capital Health Medical Group is made up of more than 250 physicians and other providers who offer primary and specialty care, as well as hospital-based services, to patients throughout the region.

Position Overview:

Monitors the organization’s network using computer hardware and software to detect security incidents in progress. Develops, manages and provides security-related education and training programs for system administrators, department managers and general users. Coordinates and communicates with members of Security team to establish, plan, and execute security goals. Maintains security patching and upgrade schedule. Performs security system upgrades. Develops and maintains security policies, procedures and standards.

MINIMUM REQUIREMENTS

Education:Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related fields, or equivalent. In lieu of a degree, five years of hands-on security experience plus advanced security certifications may be substituted.

Experience:Minimum five years of hands-on IT security experience, or equivalent. Proficient in endpoint protection, content filtering, firewall, SIEM, PAM, IAM and IRP. Working knowledge of NIST CSF, HIPAA and other security framework.

Other Credentials:

Knowledge and Skills:Knowledge of desktop support, networking and security technologies. Experience with desktops, servers, storage, virtualization, networking and security technologies. Working knowledge or IAM, PAM and other security solutions.

Special Training:Network+, Security+, CySA+, CEH or other advanced IT security certifications

Mental, Behavioral and Emotional Abilities:

Usual Work Day:8 Hours  

REPORTING RELATIONSHIPS

Does this position formally supervise employees? No

If set to YES, then this position has the authority (delegated) to hire, terminate, discipline, promote or effectively recommend such to manager.

ESSENTIAL FUNCTIONS

• Exhibits strong technical knowledge and expertise in managing all aspects of the organization's enterprise-wide infrastructure and network topologies, including the design, configuration, maintenance, monitoring and upgrade of network services.

• Maintains advanced level of knowledge of supported systems, creating accurate standards and procedures for network security. Provides documentation for review and inclusion into departmental knowledge base.

• Develops and manages security-related education and training programs for system administrators, department managers, and general users.

• Maintains network security, as evidenced by proficient use of security controls, such as intrusion detection systems, firewall, access control lists, and a definitive understanding of organization's security policies & procedures. Maintains awareness of security and software that expediently implements patches to fix problems.

• Generates documentation to assist in the community to increase awareness and understanding of security policies, with relevance to information services applications for review at departmental meetings and publication on the intranet. Assists team members in the interpretation of security policies through discussions and documentation updates in the department.

• Assists departments with implementing and maintaining preventive security measures.

• Provides troubleshooting assistance and training to non-senior analysts for reviewing documented steps taken to determine cause of system interruption, completing diagnostics until restoration of system functionality.

• Resets passwords for enterprise and departmental applications. Exercises discretion and judgement when creating job profiles and modifies access when responsibilities change. Follows departmental policies and procedures required when reviewing the system documentation monthly. Reinstates access to enterprise or departmental applications where required by following departmental procedures.

• Accurately records problems reported in accordance with documented procedures. Notifies and communicates status of problem throughout issue lifecycle, with documentation of steps in security databases. Completes daily assignments of tasks and documents activities appropriately.

• Participates in discussions with Internal Audit department to understand compliance requirements.

• Leads the team in periodic review of policies. Offers ideas for revisions to fit the current env