Information Security Advisor

Anticipated End Date:

Job Description:

Information Security Advisor

Location:

Ideal candidates will be able to be reports to our Pulse Point location at 740 W. Peachtree St NW, Atlanta, GA 30308. This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

Work Hours:

Monday to Friday, 8:00 am to 5:00 pm

The Information Security Advisor is responsible for representing infrastructure security support in significant projects and performing the most complex operations and administration tasks.

• Document standard operating procedures (SOP), maintain and update runbook.
• Validate report data to ensure accuracy.
• Create process flows and metrics for internal review.
• Run vulnerability scans on databases before releasing to production to eliminate potential vulnerabilities and validate proper controls are in place.
• Administer vulnerability and secure configuration scanning for databases and servers on premise and in the cloud.
• Analyze vulnerabilities with available exploits to identify opportunities to mitigate or remediate vulnerability exposure on impacted systems.
• Administer vulnerability risk assessment methodology based on Common Vulnerability Scoring System (CVSS) utilizing Qualys, Guardium and Prisma vulnerability assessment technologies.
• Communicate with system owners to help support remediation of identified vulnerabilities.
• Work with Cloud Security Engineering/operations and application teams to provide remediation guidance and consultation for vulnerabilities/misconfigurations.
• Vulnerability Risk assessment for Cloud Environments.
• Reporting and communication for cloud/container vulnerabilities, including automation and integrations.
• Cross collaboration for vulnerability remediation support with Penetration Testing and Application Security workflows.

• Bachelor's degree in Information Systems, Computer Science, or a related field of study.
• Five (5) years of experience in related occupation(s).

• Five (5) years of experience in related occupation(s) must include:
• Three (3) years of experience in all of the following:
• Administration of database vulnerability management assessment tools;
• Performance of vulnerability assessment utilizing the Common Vulnerability Scoring System (CVSS);
• Administration of database technologies including SQL, Oracle, and DB2;
• Operating and administering infrastructure or applications with Cloud environments; and Executing activities in alignment with compliance and contractual requirements;
• AICPA SOC 2;
• Payment Card Industry Data Security Standard (PCI-DSS);
• HiTrust.

• Employer will accept a Master's degree in Information Systems, Computer Science, or a related field of study and Three (3) years of experience in related occupation(s). Must have skills listed above.

Job Level: Non-Management Exempt

Workshift:
Job Family: IFT > IT Security & Compliance

Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.

Elevance Health is a health company dedicated to improving lives and…