IS Security GRC Platform Engineer

We've made a lot of progress since opening the doors in 1942, but one thing has never changed - our commitment to serve, heal, lead, educate, and innovate.  We believe that every award earned, every record broken and every patient helped is because of the dedicated employees who fill our hallways. 

At Ochsner, whether you work with patients every day or support those who do, you are making a difference and that matters.  Come make a difference at Ochsner Health and discover your future today! 

The Security Engineer is a dynamic role requiring knowledge of technology, cyber security, data protection, and governance practices. The engineer will partner with existing teams to build and run security services using agile methodologies in a broad set of operational areas including compute, cloud, software security, database and other secure system domains & processes.

Education 

Required - High School diploma or equivalent

Preferred - Additional degrees in Computer science, information systems, cyber-security, or a related field

Preferred - MCSE or equivalent certification

Work Experience

Required - 2 years IT experience with Master’s degree OR 4 years IT experience with Bachelor’s degree OR 6 years IT experience with Associate’s degree OR 8 years of IT experience

Preferred - 4 years of hands on engineering and administration of security systems in an enterprise environment. Advanced risk mitigation through technical innovation and process improvement

Knowledge Skills and Abilities (KSAs)

• Direct, hands-on experience or strong working knowledge of managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology
• Full stack knowledge of IT Infrastructure
• Must interpret business, technology and threat drivers, and develop practical security road-maps to deal with these drivers.
• Must be able to translate complex security-related matters into business terms that are readily understood by colleagues. The Senior Security Engineer should anticipate presenting analyses in person and in written formats.
• Must take responsibility for personal growth. Acquires strategies for gaining new knowledge, behaviors and skills. Builds on and applies existing knowledge. Engages in learning from others, inside and outside the organization. Tries new approaches and broadens the scope of work to learn from work assignments
• Experience with regulations and frameworks - e.g., HIPAA, PCI, NIST
• Must have computer skills and dexterity required for data entry and retrieval of information.
• Effective verbal and written communication skills and the ability to present information clearly and professionally.
• Must be proficient with Windows-style applications, various software packages specific to role and keyboard.
• Strong interpersonal skills.
• Proficiency working with databases, on-line solutions and programming languages.
• Analytical skills and logical thought processes in order to formulate solutions to problems.

• Ability to work under stressful situations so that communications with users, IS staff, and vendors continue to be objective and professional at all times.

• Ability to work with frequent interruptions and frequent changes in priorities.

• Move through the hospital and off campus sites.

• Ability for occasional out of town travel.

• Flexible scheduling such as working nights, weekends, extended shifts, etc.

Job Duties

• Conduct research on emerging products, services, and standards in support of security enhancement and development efforts. 
• Participates in Security Incident Response activities and coordinates with team leadership to record and report incidents. 
• Participate in application and infrastructure projects providing technical leadership.
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, and identity and access management (IAM)
• Facilitates the day-to-day operation of the infrastructure and maintains proper levels of system and data availability.
• Validate security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs and anti-malware/endpoint protection systems
• Serve as the security expert and communicate information security-related concepts to technical and non-technical team members.
• Review network segmentation to ensure least privilege for network access.
• Provides installation and support of the technology infrastructure.
• Liaise with the internal audit (IA) team to review and evaluate the design and operational effectiveness of security-related controls.
• Installs and maintains technology related devices.
• Coordinates multiple projects including personnel and resource coordination, documentation and management reporting.
• Provides Level III Network Server and Infrastructure Support and coordinates and schedules activities with PC Support staff.
• Develops and promotes the use of standards, policies and procedures governing use and management of technology systems.
• Participates in training, professional development and quality improvement activities.
• Other related duties as required.

The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties, and skills. Other duties may be added, or this description amended at any time.

.

The employer is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

Physical and Environmental Demands

The physical essential functions of this job include (but are not limited to) the following:  Frequently exerting 10 to 20 pounds of force to move objects; occasionally exerting up to 100 pounds of force. Physical demand requirements are in excess of those for sedentary work. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Are you ready to make a difference? Apply Today!

Ochsner Health does not consider an individual an applicant until they have formally applied to the open position on this careers website.

Individuals who reside in and will work from the following areas are not eligible for remote work position: Colorado, California, Hawaii, Maryland, New York, Washington, and Washington D.C.

Ochsner Health endeavors to make our site accessible to all users.  If you would like to contact us regarding the accessibility of our website, or if you need an accommodation to complete the application process, please contact our HR Employee Solution Center at 504-842-4748 (select option 1) or careers@ochsner.org. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

We are proud to be an Equal Employment Opportunity and Affirmative Action employer. We are committed to the principles of equal employment opportunity and providing a workplace that is free from discrimination based on race, color, creed, religion, pregnancy status, pregnancy-related conditions, national origin, ancestry, mental or physical disability, medical condition, age, veteran status, military status, citizenship status, marital status, familial status, sexual orientation, gender, gender identity or expression, genetic information, political affiliation, unemployment status, or any other characteristic protected under applicable federal, state or local law. These protections extend to applicants and all employment related decisions. View the EEO is the Law poster and its supplement, as well as the pay transparency policy for more information. 

Affirmative Action Policy Statement