IT Security Consultant

Genesis Healthcare System

10d•Onsite

About The Position

Responsible for the design, implementation and management of computer system security structures and protocols, which safeguard access to computerized information in a large complex enterprise. Designs, configures and implements role based security for Epic and other clinical, financial and operational computer systems. Develops security architectures to support privacy and confidentiality regulations, including HIPAA. Implements and manages these architectures including access provisioning access modifications and access termination, Provides support for computer security assessments and audits and other security/privacy compliance related activities.

Requirements

Associates degree in computer science, management or an IT-related discipline or equivalent experience required.
Two years security administration, security management or project management experience in the field of systems analysis, system design, role based security deployment, security and/or computer system project management.
Experience with computer system security management, provisioning and auditing.
Experience with Microsoft Active Directory security environments.
Epic certification, if required or Epic implementation experience.
Understanding of security principles in large complex environments running Windows, Unix, Citrix and mobile computing operating systems.
Knowledge of single sign-on technologies.
Understanding of HIPAA and other privacy and confidentiality regulations.
Ability to deal with a number of tasks simultaneously, with strong attention to detail.
Excellent decision-making, facilitation, conflict resolution and analytical skills required.
Pro-active problem-solver with excellent listening, verbal and written communication skills.
Must possess strong organizational and project management skills.
Working knowledge of mini-computers, client-server, personal computers and networks.
Possesses interpersonal and team leadership abilities.
Capable of working with cross-functional teams to accomplish overall project goals.
Ability to work independently and under pressure in a complex and changing working environment.

Responsibilities

Works with the project management office and management team to coordinate IT security activities and resources.
Ensures all security environments are properly installed, configured, and tested to meet project and strategic requirements.
Responsible for the project work plan for respective team and ensure milestones and deliverables are met.
Plans and manages the day-to-day activities of team members including prioritization of work, coordination of resources, and meeting plans.
Ensures completion and quality of deliverables assigned to the team including but not limited to design documentation, build audits, testing plans and scripts. Ensures deliverables are approved by the appropriate stakeholders and are completed in accordance with the plan.
Ensures the design, development and recommendations to the security systems solutions that will ensure proprietary/confidential data and systems are protected.
Oversees the day-to-day computer security activities.
Advises IT management and project leaders on developing, implementing and maintaining security policies and procedures
Participates with the client in the strategic design process to translate security and business requirements into processes and systems.
Ensures baseline documentation is developed and is responsible for change management of assigned systems; develops regular status reports on system health.
Reviews final product for identified functionality and completeness.
Manages identified issues by the project team and bring to resolution, escalate non-resolved issues to the Project Manager.
Reports completion of work plans for outstanding work, issues, and risks on a weekly basis to the Project Manager
Ensures high quality of deliverables as identified through the DBV and in conjunction with the Project Quality Control Team. These include: Activities of one team do not adversely impact activities of another team, changes are combined when appropriate to avoid duplicate effort, thorough testing to minimize problems at go live, and quality deliverables are prepared.
Works with other teams to coordinate team activities with other project teams to integrate work and system design, build, testing, training, and go-live.
Ensures team decisions are made in a timely fashion.
Evaluates the business procedures and analyzes business processes to ensure proper security configuration.
Develops and maintains documentation and procedures and provides training to other IT staff and user clients as appropriate.
Supports all project team and IT team members with application and information systems knowledge.
Logs, tracks, and resolves issues as well as any security modifications or enhancements.
Logs, tracks, analyzes, and coordinates security changes.
Effectively utilizes project tools, technologies and methodologies to provide clear and concise documentation/communication (i.e. project tracking, weekly reports, etc.).
Works with all vendors to resolve issues/problems in a timely manner.
Provides on-call support and troubleshooting via phone, remote dial-in or on-site if necessary.
Implements, maintains and follows established security measures and protocols.
Performs the necessary investigation and analysis to determine project feasibility.
Prioritizes and schedules projects and resources.
Gives advice to clients on implications of a requested change and/or an alternative solution that may better address the requirement.
Provides business/technical representation to the enterprise including future directions, how that direction impacts the enterprise, and how current and future security systems, policies and procedures can be utilized to maximize security/privacy while maximizing the customer experience.
Utilizes and follows the project management methodologies and protocols established by IT.
Participates with vendors in the assessment of new systems and technologies that meet security needs of the enterprise.
Subscribes to relevant technology information channels to stay informed of security vulnerabilities.
Proactively assesses potential items of risk and opportunities of vulnerability in the network.