Information Security Architect

The Information Security Architect provides support and direction for various components of the medical center's information security program. This position is the technical lead for coordinating and leading efforts to detect, analyze and respond security incidents and breaches. Works with the security team and other IT areas to create and implement procedures for responding to security incidents. Designs, modifies, and implements SIEM detection criteria. This position is the principal point of contact in working with the medical centers contracted SOC and is also the escalation point of contact for security and IT team members when responding to security incidents. The Information Security Architect seeks to understand and review business processes to see where and how security controls might be implemented to reduce risk and improve on compliance with HIPAA, PCI, and other best practice security frameworks. Under general supervision, the Information Security Architect supports the medical center's information security posture and performs various duties primarily focused on protecting the information assets and security posture of Torrance Memorial.

Core Competencies

• Establishes system controls by developing framework for controls and levels of access; recommends improvements.
  
  
• Ensures authorized access by investigating improper access; revoking access; reporting violations; monitoring of alerts, logs, and security reports.
  
  
• Leads the technical response to security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, data breaches, and other events and alerts detected by security controls  
  
  
• Advises management and develops and executes plans for compliance and mitigation risk 
  
  
• Investigates intrusion attempts, security incidents, malware infections, exploit attempts, and other alerts and events detected by medical center security controls 
  
  
• Advises management on risk mitigation, threat hunting discoveries, methodologies to better detect and respond to events and alerts
  
  
• Maintains and supports security controls including SIEM, secure email gateways, firewalls, and other detection technologies 
  
  

Department Specific Competencies

Education

DegreeProgramBachelor's DegreeComputer Science
Additional InformationBachelor's degree in Computer Science, Cybersecurity, Mathematics, Engineering, Science, Information Systems, or 6 years' work experience in an Information Security related role. 

Experience

Number of Years ExperienceType of Experience5Experience in Information Security related role including: Security Engineer 
Additional InformationMin of 5 years of exp in an Information Security role including: Security Engineer, Security Analyst, Security Manager, and Security Architect. 

License / Certification Requirements

Advanced Security Certificate from the following:
CISSP, CISM, CISA, CEH, GSEC, GCIA, GCFA, GSIP, GSNA, GSOC, GDSA, GNFA, and CompTIA Security +

Compensation Range: 

$55.10 - 91.52/hr

#LI-KC1