Job Description
Job Description:
Summary:
The Information Security Architect assists in the development and execution of the information security risk management strategy, risk assessment philosophy and the IT components of Lifetime Healthcare Companies' Enterprise Risk Management program. This position participates in IT security investment analysis, design, scope and approach. The primary responsibility is to provide technical expertise for the Information Security Group and serve as a trusted security advisor to the business and divisional initiatives. The architect helps to ensure a secure, risk based, and cost-effective infrastructure and application design is developed and maintained. This position advises and consults with Information Security management, and various levels of business and IT leadership, regarding the protection of corporate information and the direction of the Information Security Program.
Essential Accountabilities:
Level I
•\tParticipates in development and implementation of security architecture principles and standards that align to the Organization's overall business and strategy.
•\tDrives adoption and compliance of security standards across development and infrastructure teams both inside of and under contract with the Organization.
•\tCreates functional and technical security requirements and sees them through the project lifecycle.
•\tExecutes an overall risk management strategy with key business and divisional stakeholders. This risk management strategy includes enterprise integration of risk management into operational, regulatory/statutory, financial, technical, and security processes, including the creation of robust disaster recovery and/or business continuity plans.
•\tPerforms risk-based assessments of solutions and vendors to ensure appropriate security controls are adhered to.
•\tProvides security consultation, including design, reviews, and recommendations for various projects and initiatives.
•\tSupports the team by providing hands-on support for technologies owned and operated by the Security and Risk Department.
•\tEstablishes collaborative working relationships in the division and across the organization and subsidiaries to ensure that Information Security risks are managed, and the solutions align with the business strategy.
•\tDevelops processes, standards, and templates for managing information security risks. Supports the implementation of new standards and solutions in close collaboration with other divisional teams to allow the Organization to protect information assets (applications and infrastructure solutions) efficiently and effectively.
•\tConsistently demonstrates high standards of integrity by supporting the Lifetime Healthcare Companies' mission and values, adhering to the Corporate Code of Conduct, and leading to the Lifetime Way values and beliefs.
•\tMaintains high regard for member privacy in accordance with the corporate privacy policies and procedures.
•\tRegular and reliable attendance is expected and required.
•\tPerforms other functions as assigned by management.
Level II (in addition to Level I Accountabilities)
•\tLeads the development and implementation of security architecture principles and standards that align to the Company's overall business and strategy.
•\tHelps develop an overall risk management strategy with key business and IT stakeholders.
•\tFosters a risk management culture through education, skill development, and implementation of effective risk management processes and practices.
•\tActs as a mentor for department staff, providing subject matter expertise to the division.
Minimum Qualifications:
NOTE: We include multiple levels of classification differentiated by demonstrated knowledge, skills, and the ability to manage increasingly independent and/or complex assignments, broader responsibility, additional decision making, and in some cases, becoming a resource to others. In addition to using this differentiated approach to place new hires, it also provides guideposts for employee development and promotional opportunities.
All Levels
•\tFive (5) years of experience in an Information Technology Security Role.
•\tBachelor's degree in computer science, information technology or relevant field. In lieu of a degree, six (6) additional years of experience required.
•\tExceptional communication and influencing skills with strong ability to balance differing stakeholder interests through sound analysis and persuasion.
•\tAbility to work collaboratively with all stakeholders, both inside and outside of the Organization.
•\tExperience with the following applications or enterprise security components preferred:
•\tIdentity and access management architecture and implementation, user provisioning/de-provisioning, single sign-on
•\tEnterprise directories (AD and LDAP)
•\tMulti-factor authentication
•\tNetwork and application-level security and encryption
•\tSecurity event management
•\tFirewall architecture and design
•\tCloud Security Controls
•\tWeb server security
•\tApplication security
•\tPKI system implementation
•\tData loss prevention systems and implementation
•\tIntrusion detection and prevention systems for network and host systems
•\tRemote access security controls
•\tMobile security
•\tStrong knowledge of TCP/IP protocols, broad and deep conceptual understanding of how Applications, Application Platforms, Operating Systems and Networks function.
•\tExperience with shell scripting, Perl, other scripting language, or with any programming language such as Java, C++, or C.
•\tFamiliarity with Sarbanes Oxley, HIPAA, HCFA, PCI/DSS and other regulations impacting security (with ISO27001 and NIST security standards) is preferred, as well as COBIT and COSO familiarity.
•\tDemonstrated ability to work with a diverse team and assist in developing and shaping the Organization's Security Architecture.
•\tSound judgment, proven relationship management skills, and the ability to support security architecture aspects of business and IT initiatives.
•\tUnderstanding of process and its benefits in a maturing IT environment.
•\tAbility to quickly familiarize with newer security technologies, their implementation requirements, and how to integrate the technologies into a larger corporate solution.
•\tAbility to translate real-world threats into actionable security tasks by balancing functionality and performance needs with prudent security measures. This includes having a thorough understanding of the ramifications of various system security decisions.
Level II (in addition to Level I Qualifications)
•\tSeven (7) years of related experience in an Information Technology Security Role.
•\tPrior experience with architecture processes, strategies, and standards, required.
•\tExperience coordinating vendor solution delivery and partnering effectively with vendors to meet business needs.
•\tAt least one security industry certification (i.e., CISSP, CISA, CISM, SANS) preferred.
Physical Requirements:
•\tAbility to work prolonged periods sitting and/or standing at a workstation and working on a computer.
•\tAbility to work while sitting and/or standing at a workstation viewing a computer and using a keyboard, mouse and/or phone for three (3) or more hours at a time.
•\tAbility to travel across the Health Plan service region for meetings and/or trainings as needed.
•\tAbility to work in a home office for continuous periods of time for business continuity.
************
In support of the Americans with Disabilities Act, this job description lists only those responsibilities and qualifications deemed essential to the position.
Equal Opportunity Employer
Compensation Range(s):
Level I - 87,766 - 157,978
Level II - 110,093 - 198,168
The salary range indicated in this posting represents the minimum and maximum of the salary range for this position. Actual salary will vary depending on factors including, but not limited to, budget available, prior experience, knowledge, skill and education as they relate to the position's minimum qualifications, in addition to internal equity. The posted salary range reflects just one component of our total rewards package. Other components of the total rewards package may include participation in group health and/or dental insurance, retirement plan, wellness program, paid time away from work, and paid holidays.
Please note: There may be opportunity for remote work within all jobs posted by the CDPHP Talent Acquisition team. This decision is made on a case-by-case basis.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Summary:
The Information Security Architect assists in the development and execution of the information security risk management strategy, risk assessment philosophy and the IT components of Lifetime Healthcare Companies' Enterprise Risk Management program. This position participates in IT security investment analysis, design, scope and approach. The primary responsibility is to provide technical expertise for the Information Security Group and serve as a trusted security advisor to the business and divisional initiatives. The architect helps to ensure a secure, risk based, and cost-effective infrastructure and application design is developed and maintained. This position advises and consults with Information Security management, and various levels of business and IT leadership, regarding the protection of corporate information and the direction of the Information Security Program.
Essential Accountabilities:
Level I
•\tParticipates in development and implementation of security architecture principles and standards that align to the Organization's overall business and strategy.
•\tDrives adoption and compliance of security standards across development and infrastructure teams both inside of and under contract with the Organization.
•\tCreates functional and technical security requirements and sees them through the project lifecycle.
•\tExecutes an overall risk management strategy with key business and divisional stakeholders. This risk management strategy includes enterprise integration of risk management into operational, regulatory/statutory, financial, technical, and security processes, including the creation of robust disaster recovery and/or business continuity plans.
•\tPerforms risk-based assessments of solutions and vendors to ensure appropriate security controls are adhered to.
•\tProvides security consultation, including design, reviews, and recommendations for various projects and initiatives.
•\tSupports the team by providing hands-on support for technologies owned and operated by the Security and Risk Department.
•\tEstablishes collaborative working relationships in the division and across the organization and subsidiaries to ensure that Information Security risks are managed, and the solutions align with the business strategy.
•\tDevelops processes, standards, and templates for managing information security risks. Supports the implementation of new standards and solutions in close collaboration with other divisional teams to allow the Organization to protect information assets (applications and infrastructure solutions) efficiently and effectively.
•\tConsistently demonstrates high standards of integrity by supporting the Lifetime Healthcare Companies' mission and values, adhering to the Corporate Code of Conduct, and leading to the Lifetime Way values and beliefs.
•\tMaintains high regard for member privacy in accordance with the corporate privacy policies and procedures.
•\tRegular and reliable attendance is expected and required.
•\tPerforms other functions as assigned by management.
Level II (in addition to Level I Accountabilities)
•\tLeads the development and implementation of security architecture principles and standards that align to the Company's overall business and strategy.
•\tHelps develop an overall risk management strategy with key business and IT stakeholders.
•\tFosters a risk management culture through education, skill development, and implementation of effective risk management processes and practices.
•\tActs as a mentor for department staff, providing subject matter expertise to the division.
Minimum Qualifications:
NOTE: We include multiple levels of classification differentiated by demonstrated knowledge, skills, and the ability to manage increasingly independent and/or complex assignments, broader responsibility, additional decision making, and in some cases, becoming a resource to others. In addition to using this differentiated approach to place new hires, it also provides guideposts for employee development and promotional opportunities.
All Levels
•\tFive (5) years of experience in an Information Technology Security Role.
•\tBachelor's degree in computer science, information technology or relevant field. In lieu of a degree, six (6) additional years of experience required.
•\tExceptional communication and influencing skills with strong ability to balance differing stakeholder interests through sound analysis and persuasion.
•\tAbility to work collaboratively with all stakeholders, both inside and outside of the Organization.
•\tExperience with the following applications or enterprise security components preferred:
•\tIdentity and access management architecture and implementation, user provisioning/de-provisioning, single sign-on
•\tEnterprise directories (AD and LDAP)
•\tMulti-factor authentication
•\tNetwork and application-level security and encryption
•\tSecurity event management
•\tFirewall architecture and design
•\tCloud Security Controls
•\tWeb server security
•\tApplication security
•\tPKI system implementation
•\tData loss prevention systems and implementation
•\tIntrusion detection and prevention systems for network and host systems
•\tRemote access security controls
•\tMobile security
•\tStrong knowledge of TCP/IP protocols, broad and deep conceptual understanding of how Applications, Application Platforms, Operating Systems and Networks function.
•\tExperience with shell scripting, Perl, other scripting language, or with any programming language such as Java, C++, or C.
•\tFamiliarity with Sarbanes Oxley, HIPAA, HCFA, PCI/DSS and other regulations impacting security (with ISO27001 and NIST security standards) is preferred, as well as COBIT and COSO familiarity.
•\tDemonstrated ability to work with a diverse team and assist in developing and shaping the Organization's Security Architecture.
•\tSound judgment, proven relationship management skills, and the ability to support security architecture aspects of business and IT initiatives.
•\tUnderstanding of process and its benefits in a maturing IT environment.
•\tAbility to quickly familiarize with newer security technologies, their implementation requirements, and how to integrate the technologies into a larger corporate solution.
•\tAbility to translate real-world threats into actionable security tasks by balancing functionality and performance needs with prudent security measures. This includes having a thorough understanding of the ramifications of various system security decisions.
Level II (in addition to Level I Qualifications)
•\tSeven (7) years of related experience in an Information Technology Security Role.
•\tPrior experience with architecture processes, strategies, and standards, required.
•\tExperience coordinating vendor solution delivery and partnering effectively with vendors to meet business needs.
•\tAt least one security industry certification (i.e., CISSP, CISA, CISM, SANS) preferred.
Physical Requirements:
•\tAbility to work prolonged periods sitting and/or standing at a workstation and working on a computer.
•\tAbility to work while sitting and/or standing at a workstation viewing a computer and using a keyboard, mouse and/or phone for three (3) or more hours at a time.
•\tAbility to travel across the Health Plan service region for meetings and/or trainings as needed.
•\tAbility to work in a home office for continuous periods of time for business continuity.
************
In support of the Americans with Disabilities Act, this job description lists only those responsibilities and qualifications deemed essential to the position.
Equal Opportunity Employer
Compensation Range(s):
Level I - 87,766 - 157,978
Level II - 110,093 - 198,168
The salary range indicated in this posting represents the minimum and maximum of the salary range for this position. Actual salary will vary depending on factors including, but not limited to, budget available, prior experience, knowledge, skill and education as they relate to the position's minimum qualifications, in addition to internal equity. The posted salary range reflects just one component of our total rewards package. Other components of the total rewards package may include participation in group health and/or dental insurance, retirement plan, wellness program, paid time away from work, and paid holidays.
Please note: There may be opportunity for remote work within all jobs posted by the CDPHP Talent Acquisition team. This decision is made on a case-by-case basis.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
About CDPHP