Catholic Health Initiatives IT SECURITY ARCHITECT in ENGLEWOOD, Colorado

IT SECURITY ARCHITECT

Description

Key Functions

Lead the assessment of existing technology infrastructure to identify key risk areas, and ensure security control objectives are met. Identify, review, and select new security solutions to enhance enterprise security.

Responsibilities

  • Research general andhealthcare-specific security trends and assess the applicability andcapability of security vendor solutions.

  • Define, develop andmaintain security architecture standards and principles to ensure CHIinformation security policies and requirements are met.

  • Ensure securityarchitecture deliverables reflect and support business, technical,operational , and compliance objectives

  • Participate inArchitecture Review Board processes, reviewing new initiatives and/orprojects for compliance with security standards and optimal securityarchitecture.

  • Develop and maintaindetailed security state architectures

  • Review threat andvulnerability reports and consult in security control selection to addressrisks.

  • Maintain awareness ofIT/Security industry trends, new solutions and techniques, as well asemerging threats to evaluate and recommend those that will increaseperformance, reliability, cost effectiveness, infrastructure flexibilityor otherwise provide value to CHI.

  • Maintain a strongunderstanding of the existing CHI information security tools and controls

  • Defineand maintain the standards to embed CHI information security requirementsinto IT solution design, development and implementation, throughconfiguration management definition and approvals and through SecurityArchitecture reviews.

  • Providesecurity leadership and guidance into technical approach, design andimplementation of enterprise security capabilities.

  • Governand direct security architecture directions when supporting CHI’s needsand establishing CHI’s IT capabilities.

  • Workwith Security leadership to recommend and design changes, whenappropriate, to security frameworks and control standards to enhance CHI’soperational practices.

  • Participate in projectArchitectural Review process: ensure that proposed designs conform tosecurity architectural patterns and identify needs for new architecturalpattern development as needed

  • Updates job knowledge byparticipating in educational opportunities; reading professionalpublications, participating in professional organizations.

  • Collaboratewith appropriate groups to aid in creation and updating asneeded, security processes, practices and operations to ensure repeatableresults.

  • Collaboratewith security teams to define the high-level roadmap andarchitecture.

  • Lead efforts to createsecurity standards and hardening procedures.

  • Participate indeveloping designs for the enterprise network security environment.

  • Provide input to teams indevelopment of security requirements

Qualifications

Skills,

Requirements, Certifications

  • Bachelor’s degreein related field preferred or equivalent combination of experience andeducation.

  • 10 years of relevantsecurity experience required.

  • 6 years of relevantsecurity engineering or architecture in a 10,000 user enterprise settingexperience preferred.

  • Experience in the healthcareindustry preferred.

  • Relevant industrycertification such as CISSP, CISA, CISM, Vendor and ITIL Certificationsstrongly preferred.

  • General understanding ofHIPAA, Federal and State Information Protection and Privacy regulationsand other relevant regulations pertaining to the healthcare industrypreferred.

  • Experience with thefollowing strongly preferred:

  • Telecommunicationsand network security, Access control systems, Cryptography, andPhysical security systems

  • Standardsand best practices such as ISO 27000, HITRUST, Common Criteria, and FIPS.

  • Microsoftplatforms, UNIX operating systems

Job Recruiter Select Job Field

Primary Location COLORADO-ENGLEWOOD-DENVER MERIDIAN NORTH

Daily Schedule M-F

Scheduled Hours per 2-week Pay Period 80

Weekends Required None

Req ID: 2018-R0162003

We’re an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.