IT Security Identity and Access Manager

Job Category:

Work Shift/Schedule:

Northeast Georgia Health System is rooted in a foundation of improving the health of our communities.

About the Role:

Services the organization, patients, and employees by ensuring timely and accurate provisioning utilizing role based access controls and least privilege access principles.  Provide leadership and guidance for the Identity and Access team, including all provisioning and system access related processes.  Lead the Identity and Access team and provide support and engagement with 1:1s, lead staff meetings, and develop staff. Implement continual process improvement and innovation in processes, policies, and governance enabling the team to provide secure service delivery in a timely and accurate manner.  Management, oversight and ownership of the comprehensive identity and access platform in use by the organization.   This role is responsible for creating, maintaining, automating and improving standards in account lifecycle management.  Assists in the formulation of strategic planning for both short- and long-term activities, and performing all other duties as assigned by the Director of Information Security.  Well versed with a deep understanding of Active Directory, permissions, role based access, access provisioning, and access controls.   Manage the provisioning of Epic security and work with other applications teams and managers to ensure data confidentiality, integrity, and availability.

• Licensure or other certifications:

• Educational Requirements: Bachelor's Degree in Information System, Information Technology Management or related Field.

• Minimum Experience: 7 years of IT security operations experience. Minimum of three years working in a complex IT Security position.

• Other:

• Preferred Licensure or other certifications: CISSP or CISM.  May hold additional IT security certifications.

• Preferred Educational Requirements:

• Preferred Experience: Healthcare IT security experience.

• Other:

• Must be able to follow written technical instructions without assistance.

• Minimum of three years working in a complex IT Security position.

• Well organized and able to communicate effectively with end users as well as ITS staff.

• Must be detail oriented.

• Knowledge of the organization's core business/mission processes.

• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

• Knowledge of Personal Health Information (PHI) data security standards.

• Knowledge of the organizational planning and staffing process.

• Leadership and direction of the Identity & Access Management (IAM) team responsible for IT Security account provisioning and deprovisioning.

• Manages provisioning teams to reduce backlogs, prioritize workloads and intelligently automate platforms in support of a fast paced, growing healthcare environment. 

• Microsoft Active Directory (AD) subject matter expert with a deep understanding of AD principles and best practices eager to optimize and improve legacy configurations. 

• Administer accounts, network rights, and access to systems and equipment.

• Operate and maintain highly automated systems for gaining and maintaining access to target systems.

• Apply and utilize authorized cyber capabilities to enable access to targeted networks.

• Assess adequate access controls based on principles of least privilege and need-to-know.

• Ability to work in a fast-paced environment, supporting multiple initiatives simultaneously and prioritizing work to meet and or exceed expectations.

• Understanding Business requirements, processes, and best practice. 

• Apply cybersecurity functions (e.g., encryption, access control, and identity management) to reduce exploitation opportunities.

• Collaborate with cybersecurity personnel on the security risk assessment process to address privacy compliance and risk mitigation.

• Design group policies and access control lists continuously to ensure compatibility with organizational standards, business rules, and needs.

• Familiar with HIPAA Security and other regulatory healthcare requirements and provides input on security policy and protocol to ensure compliance.

• Reviews new systems for appropriate application security access controls and audit functionality.

• Weight Lifted: Up to 20lbs, Occasionally 0-30% of time

• Weight Carried: Up to 20lbs, Occasionally 0-30% of time

• Vision: Heavy, Constantly 66-100% of time

• Kneeling/Stooping/Bending: Occasionally 0-30%

• Standing/Walking: Occasionally 0-30%

• Pushing/Pulling: Occasionally 0-30%

• Intensity of Work: Constantly 66-100%

• Job Requires: Reading, Writing, Reasoning, Talking, Keyboarding, Driving

Working at NGHS means being part of something special: a team invested in you as a person, an employee, and in helping you reach your goals. 

NGHS: Opportunities start here.

Northeast Georgia Health System is an Equal Opportunity Employer and will not tolerate discrimination in employment on the basis of race, color, age, sex, sexual orientation, gender identity or expression, religion, disability, ethnicity, national origin, marital status, protected veteran status, genetic information, or any other legally protected classification or status.