IT Security Specialist - Identity and Access Management (IAM)

Medical Mutual•Cleveland, OH

1d•Hybrid

About The Position

Medical Mutual is hiring an IT Security Specialist in Identity and Access Management. This hybrid-remote role is based out of the Brooklyn, Ohio or Dublin, Ohio office, with onsite work required on designated in-office days each week. The position performs security operations involving policy administration and enforcement, project management, physical security, mainframe provisioning, and audit liaison activities. The posting describes three levels of the role: Specialist III, IV, and V, with increasing complexity, responsibility, and experience requirements. Specialists review access requests through the corporate provisioning system, ensure appropriate access is granted, and maintain audit controls. They work with teams across the company to assess project risks involving development, servers, and network resources, and support security-related projects, physical access planning, audits, and corporate certification initiatives. At the most senior level, the role also leads daily security operations, designs and improves data workflows and scripting for access provisioning, documents application provisioning and user-record flows, and recommends procedural or policy changes to reduce corporate risk. Medical Mutual provides equipment for the role, including a laptop, monitors, keyboard, mouse, and headset. The company describes its culture as diverse, inclusive, and welcoming, and offers career development, mentoring, coaching, and tuition reimbursement.

Requirements

A bachelor's degree in Information Technology or a related field; equivalent directly related education and experience may substitute for a degree.
Relevant IT experience varies by level: 5 years for Specialist III, 7 years for Specialist IV, and 10 years for Specialist V.
Specialist III requires intermediate understanding of current technical architecture, including server, network, and application firewall.
Specialist IV requires advanced understanding of current technical architecture, including server, network, and application firewall.
Specialist V requires expertise in one or more technologies, advanced understanding of current technical architecture including server, network, and application firewall, internal system knowledge (CMS, TOPPS, CPIM, DB2), and proficiency in all aspects of security management.

Nice To Haves

Certified in Risk and Information Systems Control (CRISC) certification preferred for Specialist III and IV.
Certified Information Systems Security Professional (CISSP) certification preferred for Specialist III and IV.

Responsibilities

Process user requests through the corporate provisioning system, ensure appropriate system access is granted, and maintain audit controls.
Review projects and documentation relating to development, servers, and network resources to identify and document risks associated with security policy enforcement and administration.
Assist with or manage security-specific projects, aligning internal and external resources to complete work critical to Security Administration.
Perform routine physical security planning and reviews, including card-key access.
Work with audits and auditors to support and maintain corporate certification initiatives.
At the Specialist V level, design streamlined data workflows for access provisioning and user-record updates, and implement and improve workflows and scripting.
At the Specialist V level, coordinate documentation supporting application provisioning and understanding user-record flows.
At the Specialist V level, assess issues and recommend procedural and policy changes to address them and reduce corporate risk associated with access and physical controls.
Perform other duties as assigned.

Benefits

Equipment for the role, including a laptop, monitors, keyboard, mouse, and headset.
Access to on-site fitness centers at many locations or gym membership reimbursement where a Medical Mutual facility is unavailable.
On-site cafeteria serving hot breakfast and lunch at the Brooklyn headquarters.
Discounts at places in and around town for team members.
Opportunity to earn cash rewards for shopping with the company's customers.
Employee bonus program.
401(k) with company match up to 4% and an additional company contribution.
Health Savings Account with a company matching contribution.
Medical, dental, vision, life, and disability insurance.
Employee Assistance Program, including professional counseling, personal and professional coaching, self-help resources, and work/life benefits assistance.
Company holidays and up to 16 PTO days during the first year, with options to carry over unused PTO.
Parental leave after 120 days of service for eligible employees who become parents through maternity, paternity, or adoption.
Career development programs and classes.
Mentoring and coaching.
Tuition reimbursement up to $5,250 per year.
Diverse, inclusive, and welcoming culture with Business Resource Groups.