Cyber Security Administrator

South Shore Health•Weymouth, MA

13h

About The Position

The Cyber Security Administrator is responsible for the ongoing support of information security policies, procedures, and technical systems in order to maintain the confidentiality, integrity, and availability of information. The individual is responsible for implementing, supporting, and enforcing information security directives as mandated by the South Shore Health System’s Information Security framework. The individual manages daily security operations, changes, and configuration management in support of information technology security initiatives; conduct technical evaluations, and make recommendations to the Information Technology group. All duties to be performed in a manner that promotes a team concept and is consistent with the culture and mission of the Health System.

Responsibilities

Perform and/or support information security risk assessments and audits to ensure that information systems are adequately protected and meet the Health Systems’ security framework and standards.
Provide coordination and support for Information Security technology and programs.
Support upgrades and enhancements to Information Security systems and tools
Administration of information security controls and tools; e.g. access controls, endpoint protection, anti-virus/malware, data loss prevention, e-mail security, encryption, patching, vulnerability, web application gateways, perimeter firewalls and security log management and monitoring tools, used in governance, risk management, and compliance of protected data.
Collaborate on information security related incidents and resolution with technical staff, and provide security expertise/knowledge to cross functional information management teams.
Conducts audits of the security levels, security practices and provides updated status reports.
Responsible for virus/malware removal, and identify and implement preventative controls and measures to mitigate future vulnerabilities.
Mitigate security event alerts and vulnerabilities through security incident event management (SIEM) tools or other external sources.
Develop and maintain technical documentation used for information security operations procedures, which outline decision support (e.g., security control administration, best practices, events of interest and incident handling, and escalation).
Identifies attacks to the Health System network and systems and escalates security issues to facilitate prompt remediation.
Identifies, tracks, and monitors information security threats to support service continuity and security management.
Keep current with security threats, new privacy and security legislation, and security technologies.
Perform other duties as assigned.
Participates in continued learning and possess a willingness and ability to learn and utilize new technology and procedures that continue to develop in their role and throughout the organization.
Embraces technological advances that allow us to communicate information effectively and efficiently based on role.
Personal transportation for local travel between SSHS sites.
Participate in emergency and on-call coverage as assigned.