Healthcare Information Security Manager (NY HELPS) - FT - Day Shift

ECMC•Buffalo, NY

4d•Onsite

About The Position

The work involves assisting the Chief Healthcare Information Security Officer (CISO) in managing the Information Security Program at the Erie County Medical Center Corporation (ECMC). The work involves addressing the electronic systems architecture and functionality as it affects safeguards of protected health information (PHI) and business information assets, as directed by the Healthcare Information Security Director or CISO. The incumbent monitors, assesses the IT business continuity and disaster recovery program and performs network penetration tests, application vulnerability assessment scans, and risk assessment reviews. The work is performed under the general direction of the Healthcare Information Security Director or CISO. Supervision may be exercised over lower-level technical staff. Does related work as required.

Requirements

Possession of a Master’s Degree in Health Information Systems, Computer Science/Computer Programming, or related computer technology or healthcare related field and one (1) year of experience in computer or information security which included experience with federal and state privacy and security laws, regulations and accreditation standards for maintaining information security and confidentiality; or: Possession of a Bachelor’s Degree in Health Information Systems, Computer Science/Computer Programming, or related computer technology or healthcare related field and three (3) years of experience in computer or information security, one (1) year of which included experience with federal and state privacy and security laws, regulations and accreditation standards for maintaining information security and confidentiality; or: An equivalent combination of training and experience as defined by the limits of (A) and (B).
Information Security , for the purpose of qualifying applications, is defined as the processes designed and implemented to protect information, systems, and networks against unauthorized access, use or disruption utilizing various forms of technology.
Your degree must have been awarded by a college or university accredited by a regional, national or specialized agency recognized as an accrediting agency by the U.S. Department of Education/U.S. Secretary of Education.
If your degree was awarded by an educational institution outside the United States and its territories, you must provide independent verification of equivalency.
Verifiable part-time and/or volunteer experience will be pro-rated toward meeting full-time experience requirements.

Nice To Haves

Thorough knowledge of state of the art computer security
good knowledge of project management and development
good knowledge of internal computer logic, programs and facilities
good knowledge of technical infrastructure security components and integrated computerized rules-based systems
familiarity with Federal and State privacy and security laws and regulations and industry best practices as they relates to healthcare information security
ability to enforce programs to ensure the security of health information across a widely dispersed workforce with a variety of information mediums
ability to read, interpret and apply technical information
ability to analyze and resolve security problems quickly
ability to supervise others
ability to establish and maintain effective working relationships with a diverse constituency
critical thinking skills
problem solving skills
technical skills
capable of performing the essential functions of the position with or without reasonable accommodation.

Responsibilities

Manages the Information Security Program procedures, technical systems and workforce training to maintain the confidentiality, integrity, and availability of data within all information systems.
Coordinates resources (staff, equipment, vendors, and consultants) across projects, manages the budget for assigned projects), monitors project progress (risks & issues) and adjusts resources and priorities accordingly.
Drives adoption of secure hardening and configuration practices in the systems security deployment cycle throughout central technology and line of business technical engineering teams.
Performs information security awareness and training to educate workforce about information risks.
Prepares and presents progress reports for management and ensure technologies are appropriately integrated to support the objectives of Cybersecurity Program.
Provides subject-matter-expertise in the discipline of Core Platform security to Cybersecurity operation team and others.
Provides consultancy for secure system design, development, engineering, and operation.
Provides project management and operational responsibility for administrative coordination and implementation of the organization’s security program.
Assists in development of Security Program Policies and enforces policies and procedures.
Assists with enforcement of access control needs of the organization.
Identifies and helps implement continuous process enhancements/improvements to Cybersecurity Operations.
Assists in managing information security directives as mandated by Federal and State regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA).
Assists with disaster recovery, business continuity, incident response, and risk management programs.
As directed by the Healthcare Information Security Director of CISO, performs or works with third-party consultants to perform information risk assessments, security audits, and accreditation surveys, ensuring that information systems are adequately protected and meet HIPAA certification requirements.
Participates in accreditation surveys.
Attends and participates in meetings, seminars, and training sessions.