[Hiring] Cloud Information Security Manager @Ardent Health Services

Role Description

The Cloud Security Manager is responsible for both working independently and leading a team of security professionals who design, maintain and manage alerts in Microsoft Azure. The Manager will work closely with various teams and stakeholders to proactively identify potential issues and fix existing problems. A successful candidate in this role strives to enforce Information security best practices, policies, standards, and guidance to ensure the safeguard of proprietary data, physical infrastructure, and resources from internal and external threats.

• Manage / define cloud processes, procedures, and playbooks.
• Define and enforce compliance and security requirements in building and managing Microsoft’s cloud environment, including:
  • Identity protection
  • Data security (classification and DLP)
  • CoPilot
• Manage security team members and coordinate activities to deliver security compliance in our growing cloud footprint in Microsoft Azure.
• Engage and collaborate with other Engineering teams to advocate and advance our security posture.
• Participate in tabletop exercises / training.
• Research and recommend solutions that meet security standards while ensuring functionality for business continuity.
• Mentor security engineers/analysts in their professional growth.
• Assist in the development of disaster recovery and contingency plans.

Qualifications

• BS/BA degree in computer science, information technology, or specialized information security technical training.
• A reputable security certification (Microsoft AZ-500, CCSP, CISSP, CISSP w/specialization HCISPP, etc.)
• 6+ years of progressive Information Security experience.
• Previous team lead or management experience.
• Comprehensive knowledge of Microsoft Azure cloud services.
• ITIL experience - managing incidents, requests, and changes.
• Knowledge of Federal and state laws regarding security and privacy of electronic information assets, within the context of the healthcare industry (e.g., HIPAA, Sarbanes-Oxley, etc.); Industry security frameworks (e.g., NIST) is required.

Requirements

• Graduate degree (preferred).
• Must be willing to travel occasionally.
• Must be willing to respond to security issues 24x7.
• Cloud security related strategies, policies, and standards.
• Data Loss Prevention design, implementation, and support.
• Ability to relate business requirements and risks to technology implementation for security-related activities.
• Ability to collaborate with IT&S and business area professionals to identify/recommend applicable security practices/controls.
• Strong customer service focus and ability to manage client (e.g., facility) expectations.
• Excellent oral and written communication skills with the ability to present and discuss technical information in a manner suitable for the audience.
• Solid project management and collaboration skills, especially in a cross-functional dynamic team environment.