Information Security Engineer

HOW WE CARE FOR YOU:
At ACM Global Laboratories, we are dedicated to getting health care right. Our robust benefits and total rewards foster employee wellbeing, professional development and personal growth. We care for your career while improving patients lives.

• Pension Plan
• Retirement Plan
• Comprehensive Benefits Package
• Tuition Reimbursement
• Benefits Effective Date of Hire
• Same Day Pay through Daily Pay
• Employee Referral Program
• Employee Assistance Program
• Employee Discounts
• Paid Time Off & Holidays

SUMMARY

The Information Security Engineer is responsible for security at various stages of a project, system implementation, during a significant change to a system, or when implementing security controls, applications, or security systems. The Information Security Engineer will advise on risks associated with the use of third party providers, and what configurations are necessary for IT systems.

ACM Global Laboratories is a growing international organization that provides continued opportunities for internal advancement. At ACM you will be part of a team that is focused on improving people’s lives where you are supported by leadership and colleagues. We are backed by a large healthcare network in the complex and rewarding field of advanced laboratory science. Your voice is heard, and with that, you have an ability to make an impact on the organization and influence your professional growth.

STATUS: Full Time            

LOCATION: Remote

DEPARTMENT: Information Technology

SCHEDULE: Days

ATTRIBUTES

• 7+ years of technical experience related to managing information security systems

• 4 year degree in an information security or information technology program is preferred

• CISSP/CISM certification or equivalent preferred 

• Experience in designing and implementing information security controls required

• Experience working in cross-functioning security teams

  
   

RESPONSIBILITIES

• Risk & Security Assessment Perform an assessment of what security controls should be put in place during the implementation, substantial change, or upgrade to an IT system. Perform assessments of security control implementations to look for opportunities for improvement.Perform assessments of third party service providers, and recommend risk reduction measures. 
• Systems Configuration & Design Configure the ACM/Drugscan/DSI Active Directory domains to establish and maintain the structure by which access management is enforced. Assure that connections between corporate and third party systems are configured securely. Work with network service providers to develop and implement network segmentation in order to reduce the risk that a compromise of a system on the intranet does not result in unnecessary risk to additional IT system resources. Program network firewalls, and perform periodic reviews of network firewall configurations. Be a primary consultation resource for designing methods to remediate risks to IT systems and data, such as by recommending and/or implementing security configurations. Define and assure that system logging is appropriately established and that log review is being appropriately carried out by the managed service provider in alignment with our unique security requirements.
• Vendor Management Consult with service providers regarding, and/or configure security appliances as needed, including data leak prevention systems, mobile device management systems, legal electronic discovery system, file integrity/monitoring systems, etc.

EDUCATION:

LICENSES / CERTIFICATIONS: 

PHYSICAL REQUIREMENTS:

For disease specific care programs refer to the program specific requirements of the department for further specifications on experience and educational expectations, including continuing education requirements.

Any physical requirements reported by a prospective employee and/or employee’s physician or delegate will be considered for accommodations.

PAY RANGE:

The listed base pay range is a good faith representation of current potential base pay for a successful full time applicant. It may be modified in the future and eligible for additional pay components. Pay is determined by factors including experience, relevant qualifications, specialty, internal equity, location, and contracts.

Rochester Regional Health is an Equal Opportunity/Affirmative Action Employer.
Minority/Female/Disability/Veterans by a prospective employee and/or employee’s Physician or delegate will be considered for accommodations.