Cyber Security Manager

*JOB TITLE: *Cybersecurity Manager *JOB PURPOSE: *The Cybersecurity Manager designs and oversees information assurance and cybersecurity.
This position is accountable for the effectiveness and efficiency of the organization's enterprise-wide cybersecurity architecture and accomplishes department objectives by planning and evaluating department activities and by managing staff.
*Essential Job Functions:* * Accomplishes department objectives by managing staff; planning and evaluating department activities.
* Establishes strategic goals by gathering pertinent business, financial, service and operations information; identifying and evaluating trends and options, chooses a course of action and evaluates outcomes.
* Prepares activity reports to inform management of the status and implementation plans of programs, services, and quality initiatives.
* Handles complaints, settles disputes, and resolves grievances and conflicts, or otherwise negotiates with others.
* Establishes work schedules and assignments for staff, according to workload, space, and equipment available.
* Accomplishes staff results by communicating job expectations; plans, monitors, coaches, develops, and disciplines staff as necessary.
* Maintains staff by recruiting, selecting, orienting, and training employees; provides personal growth opportunities to staff.
* Completes operations by: * Organizing workflow to accomplish established objectives * Developing schedules o Delegating responsibility * Evaluating subordinates effectively * Implementing productivity standards * Resolving operations problems * Maintaining reference manuals * Administering necessary discipline * Provides information to leadership, supervisors, co-workers, and subordinates by telephone, in written form, e-mail or in person as deemed most effective and appropriate.
* Controls expenses by gathering and submitting budget information, scheduling expenditures, monitoring variances, and implementing corrective actions.
*Essential Job Functions: Infrastructure and Cybersecurity Architecture* * Provides the expertise, leadership, and ownership of El Rio’s security strategy and implementation planning.
* Leads strategic cybersecurity planning to achieve organizational goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future cybersecurity technologies.
* Develops and communicates cybersecurity strategies and plans to the management team, staff, partners, customers, the board of directors, and stakeholders.
* Advises the CIO and IT Directors on enterprise cybersecurity strategy, risks, and data privacy.
* Provides strategic data security roadmap and keeps current with evolving technology.
* Provides Security direction and consulting to Subject Matter Experts (SMEs) that manage various IT infrastructure systems.
* Performs regular cybersecurity reviews.
* Designs, establishes, maintains, and improves security architecture technical standards across all IT infrastructure and cybersecurity systems.
* Establishes audit policies and procedures to ensure compliance to El Rio IT cybersecurity policies and practices.
*Essential Job Functions: IT Infrastructure and Cybersecurity Operations* * Assesses and directs mitigations to cybersecurity threats and vulnerabilities of current and future systems.
* Directs the administration of all computer security systems and their corresponding or associated software, including intrusion prevention/detection systems, DLP systems, SEIM systems, and related systems/technologies.
* Ensures the confidentiality, integrity, and availability of the data residing on or transmitted to/from/through enterprise workstations, servers, and other systems and in databases and other data repositories.
* Designs and oversees the vulnerability assessments, penetration tests, and cybersecurity audits.
* Implements changes in cybersecurity policies and practices in accordance with changes in the local or federal law.
* Provides resolution to cybersecurity problems in a creative and cost-effective manner.
* Assesses and communicates any cybersecurity risks associated with purchases or practices performed by the company.
* Where necessary, assists in the recruitment, development, retention, and organization of security staff in accordance with corporate budgetary objectives and personnel policies.
* Remains informed on trends and issues in the cybersecurity industry, including current and emerging technologies and prices.
Advises, counsels, and educates senior and management teams on their relative importance and financial impact.
* Engages in ongoing communications with peers in the Clinical and Administrative groups as well as the various business groups to ensure enterprise-wide understanding of cybersecurity goals, to solicit feedback and to foster co-operation.
* Defines and communicates plans, procedures, policies, and standards for the organization for acquiring, implementing, and operating new cybersecurity systems, equipment, software, and other technologies.
* Assesses the impact of new service requests on network security and provides solutions balancing customer needs with network security best practices.
*Other Duties and Responsibilities:* * Contributes to team effort by accomplishing related results as needed.
* Maintains professional, technical, and healthcare knowledge by attending educational workshops and reviewing professional publications.
* Maintains a safe and health work environment by establishing and enforcing organization standards and by adhering to legal regulations.
*Minimum Education and Experience:* * Bachelor’s Degree in Cybersecurity, Information Systems, Management Information Systems, Computer Science or a related field from an accredited college or university.
* Five (5) years of direct work experience in Infrastructure Security Management and IT Cybersecurity Industry Best Practices.
* Five (5) years of experience demonstrating expertise performing the following tasks: * Establishing the objectives and overseeing the implementation of corporate or government cybersecurity awareness/risk management program.
* Excellent interpersonal, communication, organizational, and project management skills and strong judgment and analytical ability.
* Five (5) years’ experience working in a medium to large Information Systems department.
* Five (5) years of IT experience in a healthcare environment.
* Five (5) years of supervisory experience; preferably in a healthcare environment.
* Subject matter expert in the Health Insurance Portability and Accountability Act (HIPAA) compliance and protection of cybersecurity.
_If applicable, equivalent combination of education and experience may be considered, and must be directly related to the functions and responsibilities of the job.
_ *Required Licenses, Certifications, and Registrations:* * CISSP (Certified Information Systems Security Professional), or CISM (Certified Information Security Manager), or CISA (Certified Information Security Auditor) or other industry certifications in security and enterprise technical architecture.
* Employees in this position are required to have reliable transportation that can meet any operational reassignments of the organization during the workday.
If an employee is driving during work hours, the employee is required to possess a valid driver’s license and must be in compliance with Arizona vehicle insurance requirements.
*Preferred Education, Experience, Skills, Abilities:* * Master’s Degree in Cybersecurity, Information Systems, Management Information Systems, Computer Science or a related field from an accredited college or university.
* Seven (7) years of direct work experience in Infrastructure Security Management and IT Cybersecurity Industry Best Practices.
* Seven (7) years of experience demonstrating expertise performing the following tasks: * Establishing the objectives and overseeing the implementation of corporate or government cybersecurity awareness/risk management program.
* Excellent interpersonal, communication, organizational, and project management skills and strong judgment and analytical ability.
* Seven (7) years’ experience working in a medium to large Information Systems department.
* Seven (7) years of IT experience in a healthcare environment.
* Seven (7) years of supervisory experience; preferably in a healthcare environment.
_Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
_ _El Rio Health does not discriminate on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity or expression, age 40 and over, disability, genetic information, military status, ancestry, marital status, familial status, or any other status protected by law or regulation.
_ _It is our intention that all qualified applicants be given equal opportunity and that selection decisions are based on job-related factors.
_ _All employees are required to undergo drug testing prior to employment and, will be subject to post-accident, reasonable suspicion, return to duty and follow up drug and alcohol testing in compliance with Federal and State regulations for alcohol and controlled substance testing.
_ _Employees in positions holding responsibility for the safety and welfare of others will also be classified as safety sensitive.
_ _El Rio Health is a Non-profit 501 (c3) Federally Qualified Health Center (FQHC) and abides by all applicable federal Drug-Free Workplace standards.
_ *Workforce Environment/Physical Demands:* The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Balancing Crouching Hearing Seeing Sitting Carrying Feeling Kneeling Close Standing Climbing Grasping Lifting Far Talking Crawling Pulling Depth Walking *Exposures:* The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Airborne Particles Fumes Muscular Strain Temperature Caustics High Places Noise Toxicants Chemicals Moving Parts Odors Vibration Electrical Current Vision Strain Weather HUMAN RESOURCES | 02/02/2021 5 | 5 Job Type: Full-time Pay: $89,136.
00 - $129,066.
00 per year Benefits: * 401(k) * 401(k) matching * Dental insurance * Flexible spending account * Health insurance * Health savings account * Paid time off * Vision insurance Schedule: * Monday to Friday Ability to commute/relocate: * Tucson, AZ 85701: Reliably commute or planning to relocate before starting work (Required) Education: * Bachelor's (Preferred) Experience: * IT experience in Healthcare: 5 years (Preferred) * Medium to Large Information Systems Department: 5 years (Preferred) * Healthcare Supervisory: 5 years (Preferred) License/Certification: * CISSP, CISM, or CISA (Required) Work Location: In person