Manager - Information Security

Primary City/State:

Category:

Shift:

Department:

Hybrid, must reside in Arizona

1 day on-site (Thursday)

Great care starts with great people. (Like you.)

At HonorHealth, you’ll find something special. From humble beginnings in 1927 to one of Arizona’s largest nonprofit healthcare systems, our culture is built on warmth and neighborly kindness. Behind every smile is a highly skilled professional with deep expertise and an unwavering dedication to what matters most - caring for the health and well-being of people and communities across the greater Phoenix area.

Responsibilities:

JOB SUMMARY

The Information Security Manager (ISM) is responsible for leading the implementation and support of formal Information Security frameworks and will take a central role in promoting a culture of information security throughout HonorHealth. The ISM will ensure HonorHealth has the protections and controls to effectively ensure the Confidentiality, Integrity and Availability (CIA) of information resources. The ISM will serve a critical role in optimizing HonorHealth's security posture to protect information resources from attack, theft, damage or unauthorized access. The ISM will lead the HonorHealth in the adoption and use of strong security measures to protect sensitive information, systems and resources, while balancing this with the ease of staff and stakeholder access to sensitive information and the efficient use of computer systems.

ESSENTIAL FUNCTIONS

• Provide leadership direction and subject matter expertise across one or more of our Information Security pillars including, Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response.
• Directly manages all human resource aspects of personnel management within assigned area including selection of new associates, initial and ongoing development, evaluation, counseling, scheduling, etc. Creates and updates standard work; Provide metrics for identified key performance indicators; Plans, establishes and revises work assignments; Monitors service management queues for work directives.
• Maintains customer-driven relationship with the operational departments across HonorHealth system care sites and corporate areas. Ensures that policies and procedures meet standards. Actively participates in decision making with management and seeks to understand the broader impact of current decisions and the effects on business requirements that will translate into system requirements.
• Provides direction as first point of contact for security incident escalations. Ensure that security incident escalation procedures are followed by all staff according to policy. Ensure that security events are clearly documented and contain detailed information regarding issue tracking and resolution. Identify and report system and network security issues ensuring all events are entered in ticket tracking application and escalated accurately. Ensure that all issues are proactively tracked and monitored to ensure timely resolution. Coordinate security incident management events follow escalation procedures as documented according to policy. Assists the Security team in security incident resolution and risk evaluations. Maximize value of purchased Information Security tools.
• Performs other duties as assigned.

EDUCATION

• Bachelors or 4 years' work related experience Information Technology or Business Administration Required

EXPERIENCE

• 5 years IT management or supervisory practices, in areas such as Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response. Required
• 8 years Management experience in a health care environment and with health care applications and multi-institutional health systems or health care consulting experience Preferred

LICENSE AND CERTIFICATIONS

• Certified IS Security Professional - Certification Combination of one or more of the following - CISSP, SAN Certs Upon Hire Required
• Information Technology Infrastructure Library V3 Certification - Certification Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ITIL v3 Foundation Certification Preferred

We're all in for your career.