IT Security, Dir 1

American Medical Association•Chicago, IL

5d•$172,056 - $228,534•Hybrid

About The Position

The IT Security, Director I provides subject matter expertise in the strategy, research, design, implementation, and operation of technical and process security controls. The role builds relationships across AMA’s IT department and business units, advising on security risk in technology selection while balancing security needs with business outcomes. It covers data security, collaboration with the security operations team, maintenance of information security infrastructure, and related contracting, policy, and regulatory compliance matters. The position maintains cybersecurity and regulatory expertise; researches, prepares, and maintains strategic roadmaps for the Information Security Program; and leads or assists with security incidents and compliance investigations. It produces clear, timely reporting for technical and senior business audiences and serves as the primary backup for the Director IT Security. The position is hybrid, based in the Chicago office, with three days per week in the office.

Requirements

At least 10 years of engineering and design experience across a mix of security platforms, including firewalls and secure network design, vulnerability management, SIEM, SOAR, DLP, enterprise encryption, Internet/Web Gateway, endpoint security, and intrusion detection and prevention systems.
Knowledge of attack and penetration methodologies, tools, and techniques.
At least 5 years conducting infrastructure and application project design reviews.
Engineering and design experience with a mix of Microsoft/Azure technologies (including Azure AD, ADFS, M365, SharePoint 2019, Windows Server 2019–2022, and Windows 10–11), Red Hat Linux, VMware, AWS EC2, S3, and IAM.
Demonstrated industry leadership capabilities and recognition as a subject matter expert in information security.
Knowledge of security scanning and analysis tools, including commercial and open-source application and infrastructure/operating-system vulnerability scanning and management tools; examples include Wireshark, NMAP, Burp Suite, Nikto, Qualys, Tenable, Snyk, and Wiz.
Strong verbal and written communication, interpersonal, analytical, and organizational skills; attention to detail and a high level of integrity.
Strong business acumen and ability to understand organizational business functions and objectives.
Knowledge of network routing and communication frameworks, protocols, and technologies such as OSI, TCP/IP v4 and v6, RIP, OSPF, VPN, HTTPS, TLS, and SSH.
A bachelor's degree in Computer Science or a related discipline is strongly preferred.
Knowledge of user authentication technologies and concepts, including Zero Trust, SAML and OAuth-based SSO architectures and identity provider integrations, MFA, VPNs, TLS, PAM, corporate Wi-Fi, device identity, 802.1x, server identification, web application authentication, and S/MIME email signing is desirable.
Knowledge of Azure administration, including Azure Active Directory, Conditional Access, Intune, Mobile Application Management, Microsoft Cloud App Security, and advanced Azure security services.
Knowledge of AWS security services and best practices, including GuardDuty, Cognito, Inspector, Detective, and AWS IAM.
Knowledge of operating systems including Windows, Mac, and Linux, and environments such as WVD, VDI, and jump boxes/bastion servers.

Nice To Haves

Experience with project management and Software Development Life Cycle methodologies.
Professional IT security or IT audit certifications such as CISSP, CISM, CEH, or CISA, and/or technical certifications.
Experience with ITIL, particularly incident, change, release, and/or problem management.
Experience with security standards and frameworks such as CIS Top 20, ISO 27001, NIST CSF, NIST 800-53, HITRUST, MITRE, OWASP, CWE/SANS Top 25, SOC 1/2/3 attestation reports, and technology risk management methodologies such as NIST 800-30.
Experience with compliance standards such as PCI, Sarbanes-Oxley (SOX), and HIPAA.
A master's degree in Computer Science or a related discipline.
Experience with cloud-based security tools such as CloudTrail, WAF, and Security Center.
Experience with source code management tools such as GitHub and Bitbucket.
Experience with dynamic, static, and open-source code scanning tools.
Experience with vulnerability management solutions such as Qualys, Tenable, and Wiz.
Knowledge of programming languages such as .NET, Java, JavaScript, Angular, Drupal, and Python; web services and APIs including REST and RPC; and infrastructure as code tools such as CloudFormation and Terraform.
Knowledge of SQL, LDAP, and/or regular expressions.

Responsibilities

Research, design, evaluate, and test security and regulatory compliance for AMA applications, systems, and networks, including purpose-built security tools and controls embedded in enterprise systems and applications.
Manage the effective use, enhancement, upgrading, and lifecycle management of AMA cybersecurity systems through vendor relationships.
Integrate security components into the AMA environment to optimize usability, effectiveness, and coverage.
Assess technical risks before and after production through the Software Development Lifecycle and Change & Release Management Boards; propose improvements, communicate risks, and recommend solutions.
Research and coordinate responses to malicious or inappropriate activity, remediate issues, and maintain a consistent organization-wide risk assessment approach.
Prepare policy updates and recommend short- and long-term security improvements related to enterprise architecture, data integration and access, cloud strategy, and AI implementations.
Collaborate on developing and implementing information security policies and governance frameworks, aligning initiatives with business goals and applicable standards and regulations.
Ensure compliance with relevant laws, regulations, and frameworks, including PCI, GDPR, NIST, and ISO standards, and manage security audits and assessments.
Co-manage reviews of new software, data, and service provider products and contracts.
Stay current on cybersecurity threats and best practices.
Drive continuous process improvement in IT Security service delivery, prioritize improvements based on cost and benefit, and communicate opportunities to management.
Serve as an escalation point for IT Security service requests.
Manage IT Security-led projects under applicable AMA governance processes, including the Software Development Life Cycle, and deliver projects within time and budget tolerances.
Mentor security and infrastructure team members, including analysts, engineers, and managers, on information security strategies and threat prevention techniques.
Lead or assist with security incidents and compliance investigations, maintain strategic security roadmaps, and report to technical and senior business audiences.
Serve as the primary backup for the Director IT Security.
Perform other responsibilities as assigned.