Information Security Administrator
Employment Status: Full-Time
Department: INFORMATION SYSTEMS
Job Description:
Please note: this position would be able to work at Memorial Medical Center (Ashland, WI) or Hayward Area Memorial Hospital (Hayward, WI). Remote work would be considered, depending on experience and qualifications.
The Information security administrator will be responsible for all security protocols related to Regional Enterprises Inc’s information infrastructure and network. They work with system administrators to track down security vulnerabilities in the information sharing network to ensure that such weaknesses in the system are addressed and remedied efficiently. Administrator to work continuously on security measures and applications designed to mitigate the risk of malicious intrusion into the network's information sharing structure and internet file sharing. They monitor and upgrade malware, anti-trojan, virus detection, intrusion detection & prevention systems. Conduct analysis on the information sharing structure; and test for security vulnerabilities. Administrator to research new anti-intrusion applications and test their effectiveness against the network's and organization's security protocols and requirements. Create and implement policies, protocols, and procedures for the Organization; as well as managed campaigns testing end user security awareness. Responsible for presenting reports based on risk analysis of the information sharing network.
Responsibilities and Duties:
- Monitor events, investigate potential issues, analyze the risk of identified issues, and work with appropriate teams to develop solutions to correct critical issues
- Audit access throughout systems/applications and ensure access is at appropriate levels
- Analyze systems, security controls, and event logs to detect compromised activity
- Build documentation of existing processes and exceptions based on audit findings
- Test new technologies during proofs of concept to ensure that product claims and abilities meet the company's needs
- Collaborate with team engineers and architects to ensure security of new projects
- Audit the company's security controls to ensure they are working correctly
- Build documentation of existing processes and exceptions based on audit findings
- Proficiency in operating systems (Windows, Mac, Linux/Unix, mobile), network theory/design, penetration testing, endpoint security monitoring, coding and scripting, reverse engineering of malware, enterprise risk methodologies
- Familiarity with authoritative information security resources (the National Institute of Standards and Technology, HIPAA
- Install, upgrade, maintain all security investments at REI; research and develop new strategies
- Work with Security Partners on Penetration tests annually
- Work with Security Partners on Security Information and Event Management System
- Analyze IT requirements and provide objective advice on the use of IT security requirements for all REI systems
- Represent the Organization’s Security posture and help develop an Internal Security Steering Committee
- Gather feedback from end users to continue to improve systems
- Design, analyze and implement efficient IT security systems
- Monitor computer networks for security issues
- Investigate security breaches and other cyber security incidents
- Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs
- Document security breaches and assess the damage they cause
- Develop company-wide best practices for IT security
- Advise Information System’s colleagues install security software and understand information security management
- Research security enhancements and trends making recommendations to management
Qualifications and Skills:
- Experience in information security or related field 3 plus years
- Experience with computer network penetration and techniques
- Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts
- Ability to identify and mitigate network vulnerabilities and explain how to avoid them
- Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.
Education / Licensure / Certification Qualifications:
- Bachelor's Degree in Information Systems or Information Security, Associate Degree in Information Systems or Information Security, or other related IT Security areas is preferred.
- Experience in Healthcare IT preferred but not necessary.
Shift Rotation:
- 8-hour shifts
- May be required to take call
Benefits and Salary:
MMC offers employees a competitive benefits package that includes
Insurance Plans*
Health
Dental
Life
Accidental Death & Dismemberment
*eligibility criteria must be met to participate in insurance plans. Not all employees may be eligible.
403 (b) Retirement Savings Plan
All employees are eligible to participate in the savings plan. Through payroll deductions, you can elect to contribute pre-tax and/or post-tax basis towards your retirement. We offer matching contributions for eligible employees.
Paid Time Off
MMC employees receive generous time off for vacations, illness and other personal matters.
About Us
MMC is a regional medical center that serves patients from 7 counties in northwest Wisconsin and Gogebic County in Michigan. We have more than 60 full-time physicians and specialists on-staff and over 500 employees who are dedicated to providing quality care. Our charming city of Ashland, WI is located on the shores of Lake Superior near Bayfield and the 21 Apostle Islands, and boasts a strong community, historic charm, modern conveniences and abundant opportunities for outdoor recreation. Our passion and driving force is to see the people of our community live healthy, productive lives. EOE.
Apply Now