Description

GENERAL SUMMARY OF DUTIES

Promote an innovative, forward thinking culture to develop, implement and monitor a strategic, comprehensive enterprise cyber security program. Lead a multidisciplinary team responsible for cyber incident response, monitoring, threat assessment/mitigation, cyber systems architecture design and implementation while advancing enterprise cyber security capabilities. At part of the IT Management team, help develop and implement the over-arching IT strategy for Piedmont HealthCare.

SUPERVISION RECEIVED

Reports to the Chief Information Officer

SUPERVISION EXERCISED

Cyber Security Team Members

ESSENTIAL FUNCTIONS

Develop and propose Cyber Security budget based on current and projected cyber security needs as it pertains to personnel, security solutions, and managed services Understand technology disciplines which include but are not limited to: endpoint security, data loss protection, firewalls, intrusion detection and intrusion prevention, application and system scanning tools, log collection and monitoring Supports multiple systems and applications of medium to high complexity with multiple concurrent users, ensuring control, integrity and security, and accessibility. Participates in short- and long-term planning efforts with stakeholders and IT groups. Participates in business requirement meetings as necessary. Communicates events to stakeholders, IT teams, and PHC leadership. Integrates solutions with other applications and platforms based on engineering requirements. Develops new alerts and monitoring techniques based on engineering requirements. Coordinates changes across multiple systems. Forecasts utilization patterns and identifies modifications and upgrades. Reviews security reports. Leads or provides technical direction for the planning, designing, and execution of cybersecurity testing efforts. Performs system reviews periodically with users and vendors. Coordinates problem resolution among a variety of functional areas and provides subject matter expertise supporting diagnosing and resolving problems. Reports security issues when appropriate and gathers required information. Makes recommendations to improve security and participates in investigations as needed. Ensures adherence to security requirements. Assists in developing documentation for new cybersecurity solutions and ensures documentation is maintained. May communicate, consult, and coordinate across multiple stakeholder groups. Responds to and manages tickets assigned in trouble ticketing/request system. Provides technical guidance, coaching/mentoring to cybersecurity team members. Provides input to performance management of cybersecurity team members. Assists the CIO in developing and maintaining the IT department budget. Other duties/responsibilities as assigned. Requirements

EDUCATION

Bachelor's degree in Computer Science, Information Technology, Computer Business Systems or a Healthcare related field with a significant technical component. Significant and relevant work experience and/or technical certification can be substituted for education on a year-for-year basis.

EXPERIENCE

8+ years of relevant experience deploying and/or administering cybersecurity solutions, preferably in a clinical setting, and preferably in a large ambulatory physician practice.

REQUIREMENTS

Relevant technical certifications are preferred. Requires strong knowledge of and experience with multiple enterprise security solutions to include SIEM, E-mail Gateways, Firewall, MultiFactor authentication, IDS, IPS. All IT team members are entrusted with significant rights to sensitive data, including corporate financial and business data as well as patient protected health information (PHI). The privacy and security of patient data is guaranteed under the provisions of the Health Insurance Portability & Accountability Act (HIPAA) of 1996. Therefore, IT team members are expected to have a good working knowledge of the HIPAA Privacy and Security Rules. IT team members are expected to exemplary practitioners of all PHC policies pertaining to privacy and cybersecurity and resources for other PHC team members to consult with questions about privacy and cybersecurity best practices.

KNOWLEDGE AND SKILL REQUIREMENTS

Excellent customer service skills Experience supervising technical staff preferred Ability to work independently and as part of a team Good written and verbal communications skills Good project management skills Ability to build relationships and trust with internal customers

ENVIRONMENTAL/WORKING CONDITIONS

Most work will occur in an office setting, computer facility, and clinical offices. Local travel is required. Minimal exposure to communicable diseases is possible.

PHYSICAL/MENTAL DEMANDS

Standing and sitting for long periods while doing computer input and responding to phone questions are likely. Must have ability to bend, stoop, twist and work with computer equipment. Occasional stress in working with tense users and multiple tasks is likely.