DEPARTMENT(S): IS- Infrastructure and Operations
REPORTS TO: Director, Information Services (Infrastructure and Operations)
FLSA STATUS: Exempt
SALARY GRADE: P - $117,000 - $165,000
_ _
JOB SUMMARY
The Information Security Architect is a cybersecurity specialist and Subject Matter Expert (SME) who will help CalOptima architect and execute strategic security goals and objectives. The incumbent will develop and enhance the security architecture by leveraging existing toolsets and controls while also designing the secure Information Services (IS) landscape of the future. The incumbent will have a unique opportunity to be hands-on with the latest tools and technologies, while helping to lead and shift to a more agile and cloud-focused architecture to combat emerging threats. The Information Security Architect will design, and have the discipline and experience, that will assist CalOptima with the primary responsibility of protecting its members, providers, and employee’s data, while building, monitoring, and managing security controls to protect the organization from internal and external threats.
POSITION RESPONSIBILITIES:
- Owns security architecture, identifies design gaps and risks, recommends enhancements, and mitigates strategies (immediate, short, and long-term).
- Ensures alignment between Information Security architecture and the overall IS organization’s (Infrastructure & Applications) strategy and goals.
- Communicates security architecture and technologies for both technical audiences as well as CalOptima’s business partners.
- Diagrams and documents overarching security landscape, using threat modeling frameworks and methodologies.
- Develops architectural standards that will adhere to compliance requirements, especially Health Insurance Portability Accountability Act (HIPAA) and data privacy (California Consumer Privacy Act - CCPA).
- Documents security standards and policies. Aligns security projects/programs to internal InfoSec roadmap.
- Works closely with executives, business managers, audit, and legal counsel to understand corporate requirements related to security and regulatory compliance, and to map those requirements to current data security projects and initiatives.
- Designs, deploys, and measures the effectiveness of proven best practices and controls to protect sensitive data (member, provider, and corporate).
- Evaluates suspected security breaches and recommends corrective actions (including
incidents involving outside vendors or partners).
- Supports and assists the review of applications and/or technology environments during the development or acquisitions process to (a) assure compliance with corporate data security policies and directions and (b) assist in the overall integration process regarding CalOptima’s own technology environment.
- Hires, trains, reviews, manages, and sets goals for assigned staff.
- Other projects and duties as assigned.
POSSESSES THE ABILITY TO:
- Exhibit technical expertise in existing security and Information Technology (IT) systems. In addition, understands how disparate systems relate within the holistic technology landscape.
- Leverage experience with networking technologies, including protocols, design concepts, and advanced access controls.
- Be the SME in cloud security controls and experienced in mitigating threats in multi-cloud/hybrid cloud environments.
- Stays abreast of emerging security technologies and threats.
- Recommend and develop strategies and solutions that will enhance data security in CalOptima’s application portfolio.
- Comprehend security technologies related to data encryption/obfuscation, data protection, access privileges, threat protection, and zero-trust/threat detection.
- Formulate detailed technical documentation and remediation requirements.
- Lead security projects/initiatives for large transformational efforts.
- Lead, influence, and improve assigned staff’s dynamics.
- Mentor other Information Security professionals on best-practices, procedures, and concepts.
- Communicate clearly and concisely, both verbally and in writing.
- Think critically and have strong analytical skills.
- Establish and maintain effective working relationships with CalOptima leadership and staff.
- Serves as an Information Security expert, trusted advisor, and colleague with the IS team.
- Be well-organized and approach problems with a creative and inquisitive attitude.
- Utilize computer and appropriate software (e.g., Microsoft Office: Word, Outlook, Excel, PowerPoint) and job specific applications/systems to produce correspondence, charts, spreadsheets, and/or other information applicable to the position assignment.
EXPERIENCE & EDUCATION:
- Bachelor’s degree in Computer Science, Information Systems, or relevant field or the equivalent combination of education and/or experience in related field required.
- 5 years of experience in Information Security, working at a senior-level, with responsibility for architecture and design required.
- 3 years of progressive leadership experience, including direct supervision of staff, in managing information systems teams required.
- Advanced Security Certifications required such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), HealthCare Information Security and Privacy Practitioner (HCISPP), Certified Information Security Manager (CISM), and/or CompTIA Advanced Security Practitioner (CASP) required.
PREFERRED QUALIFICATIONS:
- 10 years of information data security experience, preferably securing sensitive data preferred.
- 7 years of total IT technical experience (networking, infrastructure) preferred.
- 5 years working in a healthcare environment is strongly preferred.
- Deep understanding of compliance to security policies and procedures preferred.
- Experience with HIPAA, Health Information Trust Alliance (HITRUST), National Institute of Standards and Technology (NIST), Center for Internet Security (CIS), and/or International Organization for Standards (ISO) preferred. Deep understanding of compliance to security policies and procedures preferred.
- Experience with the Information Technology Infrastructure Library (ITIL) foundational methodology preferred.
KNOWLEDGE OF:
- Network-based security experience, including network systems design and firewall security.
- Expert-level knowledge in network protocols (including TCP/IP, SDN, SD-WAN) and expertise with network security solutions (Next-Gen Firewalls, Load Balancers, WAF, Proxies, VPN), as well as SEIM, CASB, and Mobile Security.
- Vulnerability testing in addition to penetration testing. Developing security practices as a people problem versus a technical problem.
- Standards-based architecture with an understanding of how to get there, including compliance monitoring and enforceability.
- Cloud security, especially with Microsoft Azure and secure Microsoft 365 environment.
- Application security and integrations.
CalOptima is an equal employment opportunity employer and makes all employment decisions on the basis of merit. CalOptima wants to have qualified employees in every job position. CalOptima prohibits unlawful discrimination against any employee, or applicant for employment, based on race, religion/religious creed, color, national origin, ancestry, mental or physical disability, medical condition, genetic information, marital status, sex, sex stereotype, gender, gender identity, gender expression, transitioning status, age, sexual orientation, immigration status, military status as a disabled veteran, or veteran of the Vietnam era, or any other consideration made unlawful by federal, state, or local laws. CalOptima also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics or is associated with a person who has, or is perceived as having, any of those characteristics.
_ _
If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Human Resources Disability Management at 657-900-1134.
Required Skills
Required Experience