IT Security, Director I (Hybrid)

American Medical Association•Chicago, IL

3d•$172,056 - $228,534•Hybrid

About The Position

The IT Security, Director I provides subject matter expertise in the strategy, research, design, implementation, and operation of technical and process security controls. The role builds strong relationships across the AMA’s IT department and business units, advising on security risks in technology selection while balancing risk with business outcomes. Responsibilities span data security, collaboration with the security operations team, and maintenance of the organization’s information security infrastructure, including related contracting, policy, and regulatory compliance matters. The position maintains cybersecurity and regulatory expertise to develop and maintain strategic roadmaps for the Information Security Program. It leads or assists with security incidents and compliance investigations and prepares clear, timely reporting for technical and senior business audiences. The role serves as the primary backup for the Director IT Security and mentors security and infrastructure team members. This is a hybrid position based in the AMA’s Chicago office, requiring three days per week in the office. It is an exempt position with a stated salary range of $172,056–$228,534, and employees are eligible to participate in an incentive plan.

Requirements

At least 10 years of engineering or design experience across a mix of security platforms, including firewalls and secure network design; vulnerability management; SIEM; SOAR; DLP; enterprise encryption; Internet/Web Gateway; endpoint security; and intrusion detection and prevention systems.
Knowledge of attack and penetration methodologies, tools, and techniques.
At least 5 years conducting infrastructure and application project design reviews.
Engineering or design experience across a mix of infrastructure technologies including Microsoft/Azure (Azure AD, ADFS, M365, SharePoint 2019, Windows Server 2019–2022, Windows 10–11), Red Hat Linux, VMware, AWS EC2, S3, and IAM.
Demonstrated industry leadership capabilities and recognition as a subject-matter expert in information security.
Knowledge of security scanning and analysis tools, including commercial and open-source application and infrastructure/operating-system vulnerability scanning and management tools; examples include Wireshark, NMAP, Burp Suite, Nikto, Qualys, Tenable, Snyk, and Wiz.
Strong verbal and written communication, interpersonal, analytical, and organizational skills; attention to detail and a high level of integrity.
Strong business acumen and ability to understand the organization’s business functions and objectives.
Network routing and communication frameworks, protocols, and technologies such as OSI, TCP/IP v4 and v6, RIP, OSPF, VPN, HTTPS, TLS, and SSH.
Bachelor’s degree in Computer Science or a related discipline is strongly preferred, though listed under requirements.

Nice To Haves

Experience with project management and software development lifecycle methodologies.
Professional IT security or IT audit certifications such as CISSP, CISM, CEH, and/or CISA, or technical certifications.
Experience with ITIL, particularly incident, change, release, and/or problem management.
Experience with security standards and frameworks such as CIS Top 20, ISO 27001, NIST CSF, NIST 800-53, HITRUST, MITRE, OWASP, CWE/SANS Top 25 Programming Errors, and SOC 1/2/3 attestation reports, as well as technology risk management methodologies such as NIST 800-30.
Experience with compliance standards such as PCI, SOX, and HIPAA.
Master’s degree in Computer Science or a related discipline.
Experience with cloud-based security tools such as CloudTrail, WAF, and Security Center.
Experience with source code management tools such as GitHub and BitBucket.
Experience with dynamic, static, and open-source code-scanning tools.
Experience with vulnerability management solutions such as Qualys, Tenable, and Wiz.
Knowledge of user authentication, including Zero Trust concepts, SAML and OAuth-based SSO architectures and IDP integrations, MFA, VPNs, TLS, PAM, corporate Wi-Fi, device identity, 802.1x port-based authentication, server identification, web-application authentication, and S/MIME email signing.
Knowledge of programming languages such as .NET, Java, JavaScript, Angular, Drupal, and Python.
Knowledge of web services, APIs, REST, and RPC.
Experience with Infrastructure as Code tools such as CloudFormation and Terraform.
Administration of Azure services, including Azure Active Directory, Conditional Access, Intune, Mobile Application Management, Microsoft Cloud App Security, Azure Security Center, Advanced DDoS Protection, Azure Firewall, and Azure WAF.
Administration of AWS security services and related best practices, including GuardDuty, Cognito, Inspector, and Detective, and advocacy of AWS IAM.
Experience with Windows, Mac, and Linux operating systems, as well as WVD, VDI, and jump boxes/bastion servers.
Working knowledge of SQL, LDAP, and/or regex.

Responsibilities

Research, design, evaluate, and test the security and regulatory compliance of AMA applications, systems, and networks, including purpose-built security tools and controls embedded in enterprise systems and applications.
Oversee effective use, enhancements, upgrades, and lifecycle management of AMA cybersecurity systems through vendor relationships.
Integrate security components into the AMA environment to optimize their value, usability, effectiveness, and coverage.
Assess technical risks before and after production through the Software Development Lifecycle and Change & Release Management Boards; propose program improvements, communicate risks, and recommend solutions.
Research, respond to, and remediate malicious or inappropriate activity, while maintaining consistency in organizational risk assessments.
Prepare policy updates and recommend short- and long-term improvements to security posture, including in relation to enterprise architecture, data integration and access, cloud strategy, and AI implementations.
Collaborate on information security policies and governance frameworks, aligning security initiatives with business goals and applicable standards and regulations.
Ensure compliance with relevant laws, regulations, and frameworks, including PCI, GDPR, NIST, and ISO standards; manage security audits and assessments.
Co-manage new software, data, and service-provider products and contract reviews.
Stay current on cybersecurity threats and best practices.
Manage continuous process improvement for IT Security service delivery and prioritize improvements based on cost and benefit, communicating opportunities to management.
Serve as an escalation point for IT Security service requests.
Manage IT Security-led projects under applicable AMA governance processes, including the SDLC, and deliver projects within time and budget tolerances.
Mentor security and infrastructure team members, including analysts, engineers, and managers, on information security strategies and threat prevention techniques.
Lead or assist with security incidents and compliance investigations and provide timely, clear reporting to technical and senior business audiences.
Serve as the primary backup for the Director IT Security.
Perform other responsibilities as assigned.