Security Risk App Architect, Fulltime, Remote

at  RWJBarnabas Health

Req #: 0000175309
Category: Information Systems and IT
Status: Full-Time
Shift: Day
Facility: RWJBarnabas Health Corporate Services
Department: IT&S Security

QUALIFICATIONS:

Required:

• Technology certification or currently enrolled in BA or MA in Security
• 3 years experience in Security, Networking or Field Services in a healthcare setting

Preferred

• Masters or Bachelor’s degree in IT preferred (years of experience may be substituted for degree)
• 5 years experience in Security performing Risk Assessments, application configuration, clinical experience

ESSENTIAL FUNCTIONS:

• Facility Security Risk Assessments
• Assist in drafting risk assessments template documents.
• Identify current points of contact at the facilities for assessment issuance.
• Report progress on findings and remediation of findings from HIPAA Security and other risk assessments.
• HIPAA Security & PCI Education
• Assist in the development of HIPAA Security and PCI DSS educational materials.
• Assist in Phishing and/or Social Engineering campaigns.
• Security Risk Application Functions
• Develop and maintain the applications and systems used to perform the Security Risk and FIT Review assessments.
• Develop and maintain assessment template questionnaires.
• Provide recommendations for product improvement, and coordinate implementation of recommendations.
• Engage team members within the team and the IT&S department to develop security recommendations for the analyst s current assessments.
• Security Risk Assessments
• Perform in a Senior technical capacity on complex security assessments.
• Operations
• Provide assistance and support as needed to address incidents or issues identified within the organization.
• Provide recommendations as needed to address incidents or issues identified within the organization.
• Act as the Security Risk point person to work with the facilities, departments and other IT resources on issues related to Security.
• Continuing Education
• Learn new skills and concepts, update and refresh knowledge base through training, webinars and reading articles.
• Continuing education in Risk topics
• Further education in Security topics
• Application support and analysis for the Risk Team suite

OTHER DUTIES:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.