Information Security Advisor

Elevance Health•Atlanta, GA

3d•Hybrid

About The Position

The Information Security Advisor is responsible for representing infrastructure security support in significant projects and performing the most complex operations and administration tasks. This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace.

Requirements

Bachelor's degree in Information Systems, Computer Science, or a related field of study.
Five (5) years of experience in related occupation(s).
Three (3) years of experience in administration of database vulnerability management assessment tools.
Three (3) years of experience in performance of vulnerability assessment utilizing the Common Vulnerability Scoring System (CVSS).
Three (3) years of experience in administration of database technologies including SQL, Oracle, and DB2.
Three (3) years of experience in operating and administering infrastructure or applications with Cloud environments.
Three (3) years of experience in executing activities in alignment with compliance and contractual requirements; AICPA SOC 2; Payment Card Industry Data Security Standard (PCI-DSS); and HiTrust.
Master's degree in Information Systems, Computer Science, or a related field of study and Three (3) years of experience in related occupation(s).

Responsibilities

Document standard operating procedures (SOP), maintain and update runbook.
Validate report data to ensure accuracy.
Create process flows and metrics for internal review.
Run vulnerability scans on databases before releasing to production to eliminate potential vulnerabilities and validate proper controls are in place.
Administer vulnerability and secure configuration scanning for databases and servers on premise and in the cloud.
Analyze vulnerabilities with available exploits to identify opportunities to mitigate or remediate vulnerability exposure on impacted systems.
Administer vulnerability risk assessment methodology based on Common Vulnerability Scoring System (CVSS) utilizing Qualys, Guardium and Prisma vulnerability assessment technologies.
Communicate with system owners to help support remediation of identified vulnerabilities.
Work with Cloud Security Engineering/operations and application teams to provide remediation guidance and consultation for vulnerabilities/misconfigurations.
Vulnerability Risk assessment for Cloud Environments.
Reporting and communication for cloud/container vulnerabilities, including automation and integrations.
Cross collaboration for vulnerability remediation support with Penetration Testing and Application Security workflows.