The Information Technology Security Manager serves in a supervisory capacity and is responsible for staffing and monitoring security systems. This position ensures all information security policies, design, implementation, maintenance, and support of the information security infrastructure comply with company policies.

Primary Duties

• Supervision and leadership of the AltaPointe Security Team
• Create a framework for roles and responsibilities within the security team
• Monitor regulation compliance for current and future standards, including PCI, HIPAA
• Develop and administer information systems security policies and procedures in compliance with local, state, and Federal government regulations.
• Works with the leadership and management in the planning and delivery of security policies, projects, and services.
• Research, implement and maintain the latest advances in information technology security with best practices for current and future growth.
• Document security incidents and assess the impact and cause.
• Develop and maintain a well-defined incident response program.
• Develop and maintain a vendor risk management system with assessments of the risks.
• Audit Policies and Controls regularly, and report findings.
• Work with other departments to reduce the overall risk through technical controls and policies.
• Evaluate and install hardware and software solutions to protect sensitive information.
• Coordinate and execute penetration testing, risk analyses and security assessments.
• Maintain patch management procedures with an ability to deploy patches promptly.
• Collaborates with Application Developers to perform testing of application or platform components and implement best practices.
• Maintain intrusion detection and prevention systems.
• Evaluate and manage server and desktop endpoint protection solutions.
• Educate through seminar and online media the employees of AltaPointe concerning security risks and best practices for the prevention of security weaknesses.
• Provide regular reporting on the status of the information security program to management.
• Management and reporting of the employee awareness program
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend remediation plans, and communicate information about residual risk.

Other duties as deemed necessary should include, but are not limited to, the following:

• Participates in IT team meetings and initiatives.
• Participates in the strategic planning process for IT.
• Participates on committees deemed necessary to support standards and accreditations.
• Provides application training when deemed necessary.
• Performs other duties as assigned by the supervisor.

Administrative and other related duties as assigned.

• Actively participates in Performance Improvement activities.
• Actively participates in AltaPointe committees as requested.
• Completes assigned tasks in a timely manner.
• Treats patients with dignity and respect.
• Works in a cooperative manner with other AltaPointe employees.
• Follows AltaPointe policies and procedures.

Bachelor or Associate Degree preferred. 5 years or more of experience in computer information systems accepted in lieu of degree with a combination of Training, Certifications, and progressive relevant work experience in the area of information technology security. Completion of CISSP certification within one year of employment of position. Comprehensive knowledge of security operations and related procedures, plus a demonstrated proficiency in administering security solutions. Knowledge of information technology security standards, systems, and management of the established standards. Candidate should have experience deploying and managing security-related solutions. Ability to communicate effectively with others.