Manager Identity and Access Management

Information Security Role at Children's Healthcare of Atlanta

Children's is one of the nation's leading children's hospitals. No matter the role, every member of our team is an essential part of our mission to make kids better today and healthier tomorrow. We're committed to putting you first, and that commitment is at the heart of our company culture:
People first. Children always. Find your next career opportunity and make a difference doing what you love at Children's.

Job Description

Protects the confidentiality, integrity, and availability of Children's Healthcare of Atlanta's information systems. Serves as an expert advisor to management, peers, and clinical users in defining, recommending, and implementing necessary controls and procedures to cost-effectively manage system access and permissions. Assists in development, implementation, and maintenance of world-class information security organization, including policies, access management, information technology infrastructure, and regulatory compliance.

Oversees and coordinates Information Systems & Technology identity access management team for clinical and business system access.

Experience

• 7 years of experience in practitioner and management with information security governance, organizational structure, concepts, controls, and audits
• 7 years of experience in practitioner and management understanding of identity and access management, provisioning and de-provisioning, password management/synchronization, authentication, authorization, single sign-on, policy writing, compliance audits, training and awareness, and incident response and investigations
• 7 years of experience in practitioner and oversight of product deployment and operational responsibility for identity management, password reset, and other relevant tools
• 7 years of experience in practitioner and oversight in design and maintenance of permissions and role-based access control models for industry-standard enterprise resource planning or electronic medical record system
• 7 years of experience in practitioner and oversight in design and maintenance of Microsoft Active Directory, Microsoft EntraID and Office
  365 permissions and role-based access control models
• 2 years of experience in network and systems administration
• Experience in working with legal, audit, and compliance staff
• Experience in developing and maintaining policies, procedures, standards, and guidelines

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• 2 years of experience in a healthcare setting
• Experience in Epic security strongly preferred
• Working knowledge of Workday, Service Now and Symplr
• Strong knowledge of physical and logical security systems
• Experience in leadership in an information technology support organization

Education

• Bachelor's degree in Computer Science, Information Systems, related field, or equivalent work experience.

Certification Summary

• No professional certifications required

Knowledge, Skills, and Abilities

• Strong understanding of identity management account and entitlement lifecycle, federated identity management, onboarding and offboarding, privilege accumulation, role-based access control, authentication, authorization, and accounting, access reviews/re-certifications
• Strong leadership abilities with the capability to develop and guide information security team members and work with minimal supervision
• Strong knowledge of industry-standard human resources information systems
• Strong knowledge of regulatory credentialing system
• Strong knowledge of applicable legal and regulatory requirements, e.g., Health Insurance Portability and Accountability Act, Payment Card Industry Data Security Standard, and NIST CSF or 800-53
• Strong project management skills
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Excellent verbal, written, and interpersonal communication skills, including ability to communicate effectively and build consensus with teams across organizational lines, including business leaders/managers, information technology engineering/operations,…