IT Specialist (INFOSEC)

Duties

Participate in network and system design to ensure implementation of appropriate systems security policies.

Review the documentation for approved systems that will be submitted as part of the hospital's Authorization to Operate and ensure the documentation clearly articulates, describes the network configuration and design of the systems.

Assess the Information System Security (ISS) posture of the organization's information technology (IT) environment and implements accepted technical writing measures.

Provide the local organization's medical community with a comprehensive information systems security plan.

Monitor changes to the hospital network architecture and IT resources for continuous evaluation of ISS vulnerabilities and the need for corrective actions and/or process changes.

Report all levels of ISS vulnerabilities in the manner appropriate to the risk involved.

Assist with the development, implementation, and scrutiny of security policies, procedures, software, and hardware items to sustain system accreditation.

Ensure that local MTF systems and networks are operated and maintained in accordance with established policies.

Utilizes various security scanning tools or the most current scanning tools identified for use in the DHA hierarchy to identify vulnerabilities and remediation of vulnerable systems.

Manage, investigate, and/or coordinate with the Cyber Incident Response team on security related trouble tickets involving actual or attempted intrusion, viruses, worms, Trojan horses, hoaxes, or other incidents that pose a threat to the networks.