Associate Information Security Officer

JOB SUMMARY
This position will report directly to the Vandalia Health Information Security Officer (ISO).

Under supervision from the ISO the Associate Information Security Officer responsibilities include, but are not limited to:

• Information Security Policy maintenance and development
• Assist with strategic planning for Vandalia Health’s Information Security Program
• Assist with tracking and documenting audit and assessment remediation plans and commitments
• Assist with the development of communication for cybersecurity awareness and training
• Assist with reporting, tracking, re-education, and compliance with cybersecurity education where necessary
• Identify cybersecurity risks and assist with the maintenance of risk inventory
• Contribute to the preparation and presentation of formal information security briefings and exercises (Tabletop exercises)
• Maintain and develop information security knowledge and skills
• Partner with the appropriate Vandalia market legal and compliance teams to provide support and ensure each facility is meeting all local, state, and federal requirements for information privacy and security
• Partner with the appropriate Vandalia market privacy officer(s) to provide support and ensure each facility is meeting HIPAA and HITECH requirements

MINIMUM QUALIFICATIONS

Education: Master’s degree or equivalent technical training and/or experience in Information Security Services.

Experience: Minimum of fifteen (15) years in an information technology leadership position, preferably in healthcare industry with PCI-DSS and HIPAA knowledge. 

Certifications: CISSP (May be obtained within 18 months of hire for highly qualified candidates)

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

• Must be willing to travel locally to other system locations
• Must be willing to respond to major incidents and support 7x24