Disaster Recovery Lead

Who We Are

Point
32

Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point
32

Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are.

We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

The Lead Information Security Analyst works closely with technology colleagues and business leadership to align both technical and strategic cyber & information security solutions with business needs. The Lead Information Security Analyst will help bridge the gaps between security best practices, evolving technical landscape, regulatory requirements, and business expectations with system configuration, security processes, control effectiveness, and operational efficiency. This position will support the design and continued maturity of cyber & information security processes and will interact regularly with business and technology stakeholders at Point
32

Health and external entities, as appropriate. The Disaster Recovery Lead role reports into and is part of the overall resilience program. This role has on-call responsibilities as part of the overall Incident Management & Crisis Management framework and is a critical partner for technology owners.

• Evolves and maintains the DR framework, plans, and standards
• Ensures alignment with Business Continuity (BC) and Incident/Crisis Management
• Coordinates DR testing, exercises, and continuous improvement
• Tracks remediation of DR gaps and test findings
• Reports DR readiness and maturity to leadership
• Coordinates recovery and incident response activities

DUTIES/RESPONSIBILITIES – what you will be doing (top five):

• Provides leadership in planning, designing, assessing, and/or implementing strategic security program improvements through:
• Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation
• Identifying process improvements and developing plans to meet or exceed security best practices
• Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.
• Providing technical expertise and administration of security solutions, where applicable
• Participate in the design, implementation, and administration of security tools to reduce risk
• Identifying technology trends and evolving social behavior to support the success of the business
• Oversee and maintain system consistency through regular audits
• Provide leadership and education to colleagues; participate as an active member of the IT and security community at Point
  32
  
  Health to promote information sharing, respectful challenge, efficiency, control effectiveness, and program quality through continuous improvement
• Create meaningful and detailed metrics based on security needs
• Other duties and projects as assigned.

• Required (minimum):
  Bachelor’s degree in a related field
• Preferred:
  Master’s degree

• 5-7 years of related work experience in the Information Technology discipline.
• Preferred: 5-7 years of experience in Disaster Recovery/Business Continuity/Technology Resilience, including at least 2-3 years in a leadership or supervisory position.

• Broad knowledge of commonly used information security concepts, best practices, and standards
• Demonstrated expertise in at least two leading security & resilience areas, e.g., BC/DR, cyber resilience, cyber recovery, crisis management areas, e.g.,…