Security Risk App Architect, Fulltime, Remote at RWJBarnabas Health – HAMILTON, New Jersey

Job Overview:

The RWJBarnabas Security Risk Application Architect is responsible for the maintenance and functionality of the systems used by the team. A background in application support and configuration is essential to the position. The Architect will perform security risk assessments primarily for systems that require deeper evaluation or are more complex involving multiple internal security and technical teams. The ideal candidate will have IT Security experience performing assessments, collaborating with other teams to develop a comprehensive understanding of system risks and requirements, have worked in a healthcare setting providing technical support for hardware, software and/or biomedical equipment, have a strong understanding of HIPAA Privacy and Security, HITECH and have education in Application Security.

Qualifications:

Required:

• Technology certification or currently enrolled in BA or MA in Security
• 3 years experience in Security, Networking or Field Services in a healthcare setting

Preferred

• Masters or Bachelor's degree in IT preferred (years of experience may be substituted for degree)
• 5 years experience in Security performing Risk Assessments, application configuration, clinical experience

Certifications and Licenses:

• CompTIA Security+ Certification Required
• CompTIA Network Certification Required
• CISSP/CRISC Preferred

Essential Functions:

• Facility Security Risk Assessments
  • Assist in drafting risk assessments template documents.
  • Identify current points of contact at the facilities for assessment issuance.
  • Report progress on findings and remediation of findings from HIPAA Security and other risk assessments.
• HIPAA Security & PCI Education
  • Assist in the development of HIPAA Security and PCI DSS educational materials.
  • Assist in Phishing and/or Social Engineering campaigns.
• Security Risk Application Functions
  • Develop and maintain the applications and systems used to perform the Security Risk and FIT Review assessments.
  • Develop and maintain assessment template questionnaires.
  • Provide recommendations for product improvement, and coordinate implementation of recommendations.
  • Engage team members within the team and the IT&S department to develop security recommendations for the analyst’s current assessments.
  • Security Risk Assessments
  • Perform in a Senior technical capacity on complex security assessments.
• Operations
  • Provide assistance and support as needed to address incidents or issues identified within the organization.
  • Provide recommendations as needed to address incidents or issues identified within the organization.
  • Act as the Security Risk point person to work with the facilities, departments and other IT resources on issues related to Security.
• Continuing Education
  • Learn new skills and concepts, update and refresh knowledge base through training, webinars and reading articles.
  • Continuing education in Risk topics
  • Further education in Security topics
  • Application support and analysis for the Risk Team suite

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.