Information Security Architect - ENT

2 weeks ago Be among the first 25 applicants

Pay range: $126,470 - $205,515 / year

Benefits and perks available for eligible positions include: robust educational assistance programs, generous paid time off, employee assistance and wellness programs, paid parental leave, qualifying employer for the Public Service Loan Forgiveness (PSLF) Program, plus more.

Job Highlights

A team of more than 400 professionals, Health System Information Services (HSIS) works to keep UAB Medicine’s IT systems and infrastructure running smoothly to deliver quality care to our patients. Join our nationally ranked team at UAB Medicine, the No. 1 Best Large Employer in 2021 as ranked by Forbes magazine.

To independently employ a broad knowledge of principles, practices, and procedures in a particular field of specialization to plan, design, develop and support systems and projects. To conduct research and analysis and present findings for review. To carry out complex assignments requiring the development of new or improved techniques and procedures.

Bachelor's degree in Information Systems or a related field and six (6) years of related experience required. Work experience may substitute for education requirement. Certified Information Systems Security Professional (CISSP) certification preferred.

• CISSP, CCNA, CEH, OSCP, or GPEN certification.
• Experience with 1 or more of the items outlined below in a Healthcare setting preferred:
• Network Security
• Working knowledge of TCP/IP, HTTP, SSL, SSH and other networking protocols
• Managing network security tools such as IPS, Firewall, SASE, etc.
• Reviewing firewall requests to determine risk to organization
• Managing network configuration tools such as
• Cloud Security
• Data protection policies
• CASB Administration
• Baseline Configuration (Conditional Access policies, NIST, CIS Benchmarks, Vendor best practices)
• Support the development and execution of enterprise-wide Cloud security program
• Application Security
• Managing application security scanners (DAST, SAST)
• Familiarity with software security frameworks (OWASP, NIST, BSIMM, OpenSAMM, etc.)
• Experience performing application security assessments that involve threat modeling and security testing
• Security Architecture
• Performing technical risk assessments on new and existing systems in the environment
• Providing security configuration recommendations to network and infrastructure architects
• Developing security policies for cloud infrastructure
• Assisting with the implementation of a cybersecurity framework (NIST Cyber Security Framework, CIS top 20, etc.)
• IoT Risk management
• Maintaining passive scanners to discover IoT and biomedical devices on the network
• Referencing MDS2 documents from vendors to determine risk
• Providing remediation plans for biomedical device vulnerabilities
• Provide Biomed with architecture guidance on implementation of medical devices
• Contribute to maintaining medical device asset inventory and associated collection of security information

We are UAB Medicine, Alabama’s largest and most comprehensive health system, recognized nationally for delivering world‑class patient care, pioneering research, and cutting‑edge medical education. We proudly serve more than 1.1 million patients each year – from every county in Alabama, all 50 states, and many countries around the world. Our network spans numerous hospitals, emergency departments, more than 67 other sites of care, and a team of over 2,200 physicians.

Our key facilities include UAB Hospital – ranked the No. 1 hospital in Alabama by U.S. News & World Report and home to the state’s only ACS‑verified Level I adult trauma center and Magnet‑designated hospital – along with UAB Hospital‑Callahan Eye and five UAB St. Vincent’s hospitals serving central Alabama.

UAB Medicine offers careers across a wide range of practice environments, from our internationally renowned academic medical center and award‑winning community hospitals to our primary and specialty care clinics across the state. Whether you’re seeking the fast‑paced learning environment of a tertiary care setting or the close‑knit environment of a community…