Information Security Architect

At Houston Methodist, the Information Security Architect position is responsible for designing, building, testing and implementing systems within the Houston Methodist IT network. The Information Security Architect prepares security standards and recommends updates to security policies and procedures. Serves as a mentor to more junior team members . Develops and maintains the high-level plan for the overall logical and technical architecture of the enterprise security postures. The Information Security Architect provides technical leadership and consulting across the organization including strategic recommendations and project planning. The Information Security Architect gains organizational commitment for information security plans, initiates and participates in projects related to information security and leads associated implementations and upgrades.

FLSA STATUS
Exempt

QUALIFICATIONS

EDUCATION

• Bachelor’s degree required, preferably in cyber security, computer science, information systems or computer engineering

EXPERIENCE

• Seven years experience in Information Technology to include five years experience in information security.

LICENSES AND CERTIFICATIONS
Preferred

• CISSP - Certified Information Systems Security Professional (IISSCC) and
• Certified Ethical Hacker (CEH)

SKILLS AND ABILITIES

• Demonstrates the skills and competencies necessary to safely perform the assigned job, determined through on-going skills, competency assessments, and performance evaluations
• Sufficient proficiency in speaking, reading, and writing the English language necessary to perform the essential functions of this job, especially with regard to activities impacting patient or employee safety or security
• Ability to effectively communicate with patients, physicians, family members and co-workers in a manner consistent with a customer service focus and application of positive language principles
• Expert understanding of network security, network hardware configuration, network protocols, network standards supervision
• Ability to communicate effectively to all level of the organization and translate technical language to non technical audiences
• Ability to partner across the organization to drive security strategies that support business goals and objectives
• Strong business acumen
• Strong understanding in mobile device security management to include the configuration and administration of mobile manager applications if assigned to mobile security

ESSENTIAL FUNCTIONS

PEOPLE ESSENTIAL FUNCTIONS

• Gains organizational commitment for IT Security plans.
• Communicates effectively (oral and written) throughout the organization to cultivate a culture of security awareness and support ongoing education to support security awareness and adherence.
• Serves as a mentor to more junior team members and assists with training through formal and informal methods.

SERVICE ESSENTIAL FUNCTIONS

• Reviews current system security measures and recommends and implements enhancements.
• Implements security systems by specifying intrusion detection methodologies and equipment. Oversees security equipment and software installations and configurations.
• Partners with Security Analysts to ensure prompt response to security incidents. Provides thorough post-event analyses.
• Evaluates network and security technologies. Develops requirements for local area networks (LANSs), wide area networks (WANs), virtual private networks (VPNs) routers, firewalls and related security and network devices.

QUALITY/SAFETY ESSENTIAL FUNCTIONS

• Conducts regular system tests and ensures continuous monitoring of network security.
• Makes recommendations regarding system access based on need and role.
• Establishes security procedures and conducts cyber incident response drills.

FINANCE ESSENTIAL FUNCTIONS

• Prepares system security reports by collecting, analyzing and summarizing data and trends to ensure timely and cost effective project timelines for systems implementation and upgrades
• Evaluates new security tools and negotiates purchase agreements.

GROWTH/INNOVATION ESSENTIAL FUNCTIONS

• Proactively stays up to date on the latest security standards, authentication protocols and best practice security products. Shares information and trains members.
• Maintains in-depth knowledge of organizational strategic priorities.
• Proactively manages own professional development. Completes Individual Development Plan (IDP).

SUPPLEMENTAL REQUIREMENTS
WORK ATTIRE

• Uniform: No
• Scrubs: No
• Business professional: Yes
• Other (department approved): No

ON-CALL*
*Note that employees may be required to be on-call during emergencies (ie. Disaster, Severe Weather Events, etc) regardless of selection below.

• On Call* Yes

TRAVEL**
**Travel specifications may vary by department**

• May require travel within the Houston Metropolitan area Yes
• May require travel outside Houston Metropolitan area Yes

QUALIFICATIONS

EDUCATION

• Bachelor’s degree required, preferably in cyber security, computer science, information systems or computer engineering

EXPERIENCE

• Seven years experience in Information Technology to include five years experience in information security.

LICENSES AND CERTIFICATIONS
Preferred

• CISSP - Certified Information Systems Security Professional (IISSCC) and
• Certified Ethical Hacker (CEH)