Company :HM Health SolutionsJob Description : 

JOB SUMMARY

This job is responsible for architecting, migrating, testing and validating workloads to the Cloud using proper data protection cloud practices within the data protection for data at rest, in motion, and in use. The incumbent will work within Information Security and along-side business and IT stakeholders in safeguarding important information and protecting against data compromise, theft, misuse, and loss. Will include data classification, how to secure and encrypt the data when using a Key Management System, and management of Digital Certificates. 

ESSENTIAL RESPONSIBILITIES

Analyze and define Cloud Data Protection requirements from analysis of intake requests, projects, initiatives.Develop Cloud Data Protection requirements from analysis of intake requests, projects, initiatives.Environment Set-up, Analysis and Definition of Cloud Based Data Protection services.Project Management of Cloud Based Data Protection Services.Functional Testing of Cloud Based Data Protection Services.Production Enablement of Data Protection Services.Root Cause Analysis of production incidents .Construct and test DLP policy functionality by triggering events (PII, PCI, PHI).Identify High Value Assets by working with Business and Staff Groups to reduce DLP friction.

EDUCATION

Required

Bachelor's degree in Computer Engineering, Computer Science, Management Information Systems, Information and Decision Sciences or Cybersecurity Engineering

Substitutions

None

Preferred

Master's degree in Computer Engineering, Computer Science, Management Information Systems, Information and Decision Sciences or Cybersecurity Engineering

EXPERIENCE

Required

3 year's in IT Security3 years in Data Loss Prevention3 years with functional and integration testing of Data Protection Processes3 years with Data Protection High Value Asset Identification1 year of Cloud experience including risk assessments, cloud testing, cloud data protection, cloud service enablement

Preferred

3 years with Data Protection Incident Response

LICENSES or CERTIFICATIONS

Required

None

Preferred (any of the following)

Certified Information Systems Security Professional (CISSP)Google Cloud Platform (GCP) - FoundationGoogle Cloud Platform (GCP) - ArchitectAzure SecurityCertified Cloud Security Professional (CCSP)

SKILLS

Cloud Data Protection using Data Loss Prevention Toolsets, Configurations using Palo Alto PRISMA, Google Cloud Platform.Data Loss Prevention Policy Tuning, Configurations, Functional Testing and MonitoringUse Case Process Development, Process Mapping of Cloud Protection Services using HITRUST frameworks, NIST Cybersecurity Frameworks, CIS Top 20 ControlsForcepoint DLP, Symantec DLP, Trend Micro Integrated DLP, Microsoft DLP, Digital Guardian, SecureTrust, Check Point, Code42, CA Data Protection, Comodo MyDLPKnowledge of NIST, HITRUST, CIS, PCI, PHI Standards, Policies and Best Practices

Language (Other than English):

None

Travel Requirement:

0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-based

Teaches / trains others regularly

Occasionally

Travel regularly from the office to various work sites or from site-to-site

Rarely

Works primarily out-of-the office selling products/services (sales employees)

Never

Physical work site required

No

Lifting: up to 10 pounds

Constantly

Lifting: 10 to 25 pounds

Occasionally

Lifting: 25 to 50 pounds

Rarely

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice