Our Mission
To decrease the number of uninsured residents, improve the quality of healthcare, and reduce health disparities through an innovative, competitive marketplace that empowers consumers to choose the health coverage that gives them the best value.
Our Vision
Provide Connecticut residents with access to the most equitable, simple and affordable health insurance products to foster healthier communities.
Position Summary
The Senior Information Security Engineer will be responsible for assisting Access Health CT (AHCT) with its Information Security Risk Management Program, satisfying both regulatory compliance requirements and managing risk to an acceptable level. This role is a hands-on role that will be responsible for actively monitoring, maintaining, analyzing, implementing, triaging, advising, troubleshooting, and responding to ongoing security needs under the guidance of the Associate Director, IT Security & Compliance.
The individual selected for this role will serve as a technical security subject-matter-expert and systems integrator for complex systems and/or networks, with a focus on securing vulnerabilities and reducing risk of system and/or asset compromises. Furthermore, this role will also assist with the continuous assessment of adequacy and effectiveness of IT security controls, provide expertise, development, and support to the risk mitigation plans across the organization collaborating with various functional areas and stakeholders, inclusive of vendors and partners. This role reports to the Associate Director of IT Security and Compliance and has no direct reports.
Please note: this is a hybrid work environment and we do not provide sponsorship at this time
Responsibilities
• Lead and coordinate technical vulnerability assessments and security reviews of infrastructure, network, applications, and databases, utilizing Nessus scanning software and other state- of- the- art security tools.
• Facilitate, track, and manage vulnerability remediation based on risk categorization, with timely assessing and communicating risk, documenting, and reporting on mitigation status.
• Ensure compliance with results from vulnerability scans and/or penetration test outcomes.
• Configure and maintain the Security Information & Event Management (SIEM) platform, ensuring SIEM is fully utilized to monitor security events proactively inclusive of system logs and other monitoring data, and is in accordance with regulatory compliance requirements.
• Actively monitor, analyze, and generate reports on company's security landscape utilizing SIEM and other state- of- the- art security tools.
• Design, configure, implement, maintain, and operate information system security controls and countermeasures by collaborating with internal as well as State of CT resources.
• Serve as a primary technical administrator and system integrator for the Archer Governance, Risk, and Compliance (GRC) platform incorporating new enhancements, functionality, and features, as driven by business requirements.
• Provide guidance and technical expertise to the enterprise to ensure optimal use of the Archer GRC platform.
• Participate actively in frequent regulatory submissions and inquiries.
• Assist with management and monitoring of remediation plans for compliance and mitigation of risk.
• Liaise with IT, Legal, product owners, and business teams to provide accurate and timely response to internal and external IT Security and Compliance inquiries and related activities.
• Respond to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches.
• Prepare incident response reports that take note of security incidents and action taken to mitigate risk.
• Assess and audit authentication and access controls, including provisioning, changes, and deprovisioning of user and system accounts, security/access roles, and access permissions to information assets.
• Provide security application knowledge and design concepts to Information Technology and Development teams.
• Provide security expertise to support vendor and project security reviews and initiatives.
• Collaborate with different stakeholders cross-functionally to implement business continuity, disaster recovery and incident response plans inclusive of tabletop exercises.
• Bridge complex information security requirements with business processes and IT systems and projects and be able to translate the concepts to easily understandable terms.
• Analyze trends and changes in threat and compliance environment with respect to organizational risk and communicate accordingly.
• Develop and execute plans for compliance and mitigation of risk; perform risk and compliance self-assessments, and actively engage in and coordinate third-party risk and compliance assessments.
• Analyze and recommend security controls and procedures in business processes related to use of information systems and assets, and monitor for compliance.
• Analyze and develop information security governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security and use and operation of information systems.
• Develop, administer, and provide advice, evaluation, and oversight for information security training and awareness programs.
• Completes other tasks, as assigned.
Qualifications
Physical Demands: the physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the duties of this job, the employee is frequently required to sit, stand, hear, use hands to type data, and utilize a phone or other electronic communication devices. This employee may occasionally have to operate business machines. Specific vision abilities required in this job include close vision and the ability to adjust focus.
Work Environment : this is an in-office role 2 predetermined days per week and a remote role 3 days per week. The noise level in the work environment is usually moderate. The role requires the ability to work offsite with stakeholders at their locations, e.g., BITS, DSS. Requires fast-paced deadlines and has a high stress at times. Frequent local travel and some travel within the U.S.
Affirmative Action and Equal Opportunity Employer
PIaba155ac45b8-25405-34678050
...HOSPITAL Director of Materials Management POSITION TYPE: Healthcare Administrative SPECIALTY: Director of Materials Management... ...will play a pivotal role in ensuring efficient and effective supply chain operations within our healthcare facility. We are seeking a...
...Hub Group is now hiring: Dedicated Local CDL-A Drivers in Reno, NV \n\n Top Pay & Benefits... ...week, guaranteed \n\t ~ Local routes, home daily \n\t ~ Monday - Saturday schedule, Morning... ...and be part of what makes us an elite trucking team. \n\n Requirements \n\n \n\t...
Envision Education seeks Physics Teachers at our Bay Area schools rooted in ethnic studies, content standards, and our graduate profile.Reporting to the school Principal, Science Teachers will lead students in an academic vision of success that focuses on Envision's...
...suitable candidate is found. QUALIFICATIONS: - Need 3-5+ years current cow/calf experience- Some diversity with ranching and some farming; Grain Cart or Truck during Harvest and Air Seeder- Hard working, honest, reliable, team player, motivated, and self-starter willing...
We are seeking a skilled Email Strategist with a deep understanding of patient/medical communications to join our dynamic team. The ideal candidate will have a strong background in email marketing with a deep understanding of patient and medical communication strategies...