DEPARTMENT(S):  IS- Infrastructure and Operations REPORTS TO:  Director, Information Services (Infrastructure and Operations) FLSA STATUS:  Exempt SALARY GRADE:  P - $117,000 - $165,000

JOB SUMMARY

The Manager of Information Security is the leader for the corporate data security functions at CalOptima and its subsidiaries.  The primary responsibility is to protect our members, providers, and employees’ data, while building, monitoring, managing security controls to protect the organization from internal and external threats. Reporting to the Director of Infrastructure and Operations, this critical role manages the overarching Information Security controls, governance, and security processes within CalOptima. This role works within the Information Services (IS) department, developing and implementing our Information Security strategy and organizational security architecture.  

The scope of this role covers all data security technologies and services, including but not limited to protection services, perimeter defenses, physical and logical network access, profile management of all employees, contractors, and visitors, security awareness, logging, and application authentication controls. As the company’s data security leader, the incumbent also has enterprise-level responsibility for all information security policies, standards, evaluations, roles, and corporate awareness. The incumbent will work with internal business departments and technical groups, external auditors, and internal auditors in the development and implementation of a security strategy designed to provide a high level of protection, while preserving and enhancing business system usability and capabilities.

The incumbent must be able to develop and implement agile and scalable data security solutions that will meet the needs of our rapidly evolving health-care landscape. The incumbent must be a results-oriented person who can achieve tangible improvements in the corporate security arena, by being proactive, accountable, and curious about technology, our business, and its processes, and influence a culture of continuous improvements. Excellent technical and communications skills are a must, as well as proven security leadership skills, preferably in a healthcare setting.

POSITION RESPONSIBILITIES:

• Leads a team of Information Security professionals to expand and enhance the controls and security posture of CalOptima.
• Works closely with executives, business managers, auditors, and legal counsel to understand corporate requirements related to security and regulatory compliance, and to map those requirements to current data security projects and initiatives.
• Assists the Director and IS in developing the information security strategy, framework, and associated multi-year roadmaps. Implements and manages the overall enterprise data security processes and framework.
• Assists the Director and IS in developing policies, standards, and guidelines related to corporate data security.
• Oversees the continuous monitoring and protection of corporate data and systems.
• Deploys proven best practices and controls to protect sensitive data (member, provider, and corporate).
• Evaluates suspected security breaches and recommend corrective actions (including incidents involving outside vendors or partners). 
• Serves as the enterprise focal point for data security incident response planning and execution.
• Defines and implements an ongoing CalOptima Information Security Assessment program, which will define, identify, and classify critical assets, assess threats, and vulnerabilities regarding assets, and implement safeguard recommendations.
• Assists with internal, external, state, and federal audits in the development of appropriate criteria needed to assess the level of new/existing applications and/or technology infrastructure elements for compliance with enterprise security standards. 
• Supports and assists the review of applications and/or technology environments during the development or acquisitions process to (a) assure compliance with corporate data security policies and directions and (b) assist in the overall integration process regarding CalOptima’s own technology environment.
• Oversees the development of, and be the enterprise champion of, a corporate information security awareness and training programs.
• Oversees and manages the Information Security project and initiative portfolio. Provides executive management guidance, recommendations, and qualified assessments on project health, project results, and ongoing organizational benefits.
• Hires, trains, counsels, supervises, and appraises personnel to ensure an efficient and effective operation. Prepares and administers performance evaluations and recommends salary adjustments for subordinates.
• Leads the internal Information Security Steering Committee meetings and presentations.
• Provides executive leadership information security updates as needed.
• Other projects and duties as assigned.

POSSESSES THE ABILITY TO:

• Manage and lead assigned Information Security projects and initiatives.
• Support and assist other organizational initiatives with their security needs.
• Develop strategies and solutions that will improve all data security in our application portfolio.
• Interface with vendors, contractors, architects, and building management.
• Manage and lead a staff of Information Security professionals in their day-to-day responsibilities as well as their individual projects, programs, and initiatives.
• Be adept at delegating and ensuring accountability at all levels.
• Develop, implement, and update departmental procedures for staff and coworkers to follow.
• Develop and make recommendations for departmental annual budgets (operational and capital).
• Demonstrate behavioral competencies that are consistent with building collaborative relationships and working in a fast-paced environment.
• As successful Manager must be able to demonstrate behavioral competencies that are consistent with building collaborative relationships and working in a fast-paced environment.
• Good technical, analytical, interpersonal, communication and writing skills.
• Communicate clearly and concisely, both verbally and in writing.
• Utilize computer and appropriate software (e.g., Microsoft Office: Word, Outlook, Excel, PowerPoint) and job specific applications/systems to produce correspondence, charts, spreadsheets, and/or other information applicable to the position assignment.

EXPERIENCE & EDUCATION:

• Bachelor’s degree in Computer Science, Information Systems, or other related field required, or 5 years of equivalent experience in managing information systems teams/organizations.
• 5 years of experience in a supervisory or management role required.
• Advanced Security Certifications required. Acceptable security certifications include: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), HealthCare Information Security and Privacy Practitioner (HCISPP).

PREFERRED QUALIFICATIONS:

• 10 years of advanced data security experience; including experience securing sensitive data preferred.
• 5 years of health care experience strongly preferred.
• Experience with Health Information Portability Accountability Act (HIPAA),), National Institute of Standards and Technology (NIST), Center for Internet Security (CIS), and/or International Organizations for Standards (ISO) is preferred.

KNOWLEDGE OF:

• Network-based security experience, including network systems design and firewall security.
• Business-based aptitude, i.e., the recognition that no policies can be implemented without demonstrable business benefit.
• Vulnerability and penetration testing. 
• Developing security practices as a people problem versus a technical problem.
• Standards-based architecture with an understanding of how to get there, including compliance monitoring and enforceability.
• Cloud security, especially with Microsoft 365, Azure and a secure Microsoft 365 environment.
• Application security and integrations.

CalOptima is an equal employment opportunity employer and makes all employment decisions on the basis of merit. CalOptima wants to have qualified employees in every job position. CalOptima prohibits unlawful discrimination against any employee, or applicant for employment, based on race, religion/religious creed, color, national origin, ancestry, mental or physical disability, medical condition, genetic information, marital status, sex, sex stereotype, gender, gender identity, gender expression, transitioning status, age, sexual orientation, immigration status, military status as a disabled veteran, or veteran of the Vietnam era, or any other consideration made unlawful by federal, state, or local laws. CalOptima also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics or is associated with a person who has, or is perceived as having, any of those characteristics.

_ _

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability.  You can request reasonable accommodations by contacting Human Resources Disability Management at 657-900-1134.

Required Skills Required Experience