Information Security Engineer (Remote Florida Only) W2

Remote in Florida only (w2) Sorry no Sponsorship Position Summary Provide security expertise and consultative services to the enterprise. Work with business units in performing security exceptions or risk assessments and recommending control selections to reduce risk to an acceptable business level as well as participate in the planning, design, and management of enterprise information security initiatives in support of confidentiality, integrity and availability. Maintain information security policies, standards and processes and apply in-depth knowledge of functional aspects of information systems security and compliance. Lead an effective program designed to change employee behavior as it relates to information security. Drive effective security awareness through all business units, including all technology and clinical divisions. Primary Accountabilities • Provide information security guidance for projects in the organization project portfolio and risk adjusted control selection recommendations. • Work with business units to define security controls which reduce business risk in alignment with organization policies, procedures, and standards. • Maintain required documentation which at a minimum should include risk assessments and analysis, control listings, contact lists and risk acceptance documentation. • Contribute to the creation and maintenance of information security policies, procedures, standards, and guidelines. • Contribute to risk assessments which determine threats and vulnerabilities of organization assets. • Contribute to audits and assessments that determine compliance with information security policies, procedures, standards, and guidelines. • Assist in creating and maintaining Key Performance Indicators (KPIs), Key Risk Indicators (KRIs) and dashboards to report the security risk status of business units to leadership. • Ensure all regulatory and compliance requirements for security awareness are met and drive behavioral change into the business to inspire a security culture. • Communicate effectively, demonstrating marketing- and corporate communication-level skills. • Develop and maintain security awareness policies and content. Present security awareness content to associates in virtual meetings, huddles, orientations, etc. • Work with internal and external customers to resolve incidents and perform standard requests. MINIMUM QUALIFICATIONS • Education: Bachelor’s Degree in related area • Work Experience: 1-3 years of formal Information Security experience • Work Experience in lieu of Education: • Associates degree plus three years of applicable experience • Knowledge/Skills/Abilities: • Basic understanding of current development and trends in Information Security in one or more of the following domains: • Governance • Risk • Compliance • Business Continuity • Disaster Recovery • Security Frameworks (HIPAA, NIST, CIS, etc) • Network/Cloud/Endpoint Security • Vulnerability Management • Threat Intel • Certification: More than one security certification (i.e., Security+, SSCP, etc) • Work Experience: 1-3 years of formal Information Security experiencet Apply tot his job