Manager, Identity and Access Management

Children's Healthcare of Atlanta•Brookhaven, GA

1d•Onsite

About The Position

Protects the confidentiality, integrity, and availability of Children's Healthcare of Atlanta's information systems. Serves as an expert advisor to management, peers, and clinical users in defining, recommending, and implementing necessary controls and procedures to cost-effectively manage system access and permissions. Assists in development, implementation, and maintenance of world-class information security organization, including policies, access management, information technology infrastructure, and regulatory compliance. Oversees and coordinates Information Systems & Technology identity access management team for clinical and business system access.

Requirements

7 years of experience in practitioner and management with information security governance, organizational structure, concepts, controls, and audits
7 years of experience in practitioner and management understanding of identity and access management, provisioning and de-provisioning, password management/synchronization, authentication, authorization, single sign-on, policy writing, compliance audits, training and awareness, and incident response and investigations
7 years of experience in practitioner and oversight of product deployment and operational responsibility for identity management, password reset, and other relevant tools
7 years of experience in practitioner and oversight in design and maintenance of permissions and role-based access control models for industry-standard enterprise resource planning or electronic medical record system
7 years of experience in practitioner and oversight in design and maintenance of Microsoft Active Directory, Microsoft EntraID and Office365 permissions and role-based access control models
2 years of experience in network and systems administration
Experience in working with legal, audit, and compliance staff
Experience in developing and maintaining policies, procedures, standards, and guidelines
Bachelor's degree in Computer Science, Information Systems, related field, or equivalent work experience.

Nice To Haves

Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
2 years of experience in a healthcare setting
Experience in Epic security strongly preferred
Working knowledge of Workday, ServiceNow and Symplr
Strong knowledge of physical and logical security systems
Experience in leadership in an information technology support organization

Responsibilities

Manages identity access management team for clinical and business applications.
Works closely with leadership and teams to prioritize work to accomplish goals and maintain operations.
Develops quality measures to assess overall success of the team and the information security program and provides reports to leadership.
Evaluates and selects relevant vendor tools based on project requirements and communicates with established and potential vendors to establish and maintain relationships resulting in successful security operations.
Contributes to the definition of and managing the information security program.
Analyses, defines, and implements technology and policy architecture.
Champions awareness influences compliance with security policies and provides solutions for business-specific security issues.
Oversees day-to-day identity access management operations.
Contributes to development, coordinating, and managing information security systems and develops overall business continuity and disaster recovery plans.
Serves as thought leader for information security regulatory compliance.
Responsible for all aspects of managing and leading a team including interviewing, hiring, training, developing, directing work and processes, managing performance, recognizing, and rewarding employees.
Mentor team members and encourage personal and professional growth.
Encourage ongoing skill development by providing opportunities for continued education.