Manager - Information Security

Lexington Health is a comprehensive network of care that includes six community medical and urgent care centers, nearly 80 physician practices, more than 9,000 health care professionals and Lexington Medical Center, a 607‑bed teaching hospital in West Columbia, South Carolina. It was selected by Modern Healthcare as one of the Best Places to Work in Healthcare and was first in the state to achieve Magnet with Distinction status for excellence in nursing care.

Consistently ranked as best in the Columbia Metro area by U.S. News & World Report, Lexington Health delivers more than 4,000 babies each year, performs more than 34,000 surgeries annually and is the region's third largest employer.

Lexington Health also includes an accredited Cancer Center of Excellence, the state’s first HeartCARE Center, the largest skilled nursing facility in the Carolinas, and an Alzheimer’s care center. Its postgraduate medical education programs include family medicine and transitional year residencies, as well as an informatics fellowship.

Manages the development and delivery of IT security standards, best practices, architecture and systems to ensure information system security across the enterprise. Implements processes and methods for auditing and addressing non‑compliance to information security standards; facilitates migration of non‑compliant environments to compliant environments. Conducts studies within and outside the organization to ensure compliance with standards and currency with industry security norms.

Manages and participates in the planning and implementation of security administration for all IT projects. Responsible for evaluation and selection of security applications and systems. Makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures. Reports to the IT Security Director.

Minimum Education
:
Associate's Degree in Related Field
Minimum Years of Experience
: 8 Years of experience in information technology (to include 2 years of direct experience in information security within a complex healthcare setting)
Substitutable Education & Experience
:
Associate's Degree can be substituted for 2 years of additional experience in information security within a complex healthcare setting
Required Certifications/Licensure
:
Must hold at least two technical certification within the information security realm;
Must be willing to obtain industry or vendor certifications.
Required Training
:
In depth knowledge of cyber security technologies, processes, and threat intelligence;
Must exhibit efficiency, collaboration, candor, and results orientation;
Ability to exercise good judgment and political astuteness;
Demonstrated ability to structure, drive, and manage projects with complex multi-disciplinary issues to closure with minimal direction;
Excellent analytical and problem solving skills;
Excellent communication, interpersonal and organizational skills.

• Manages subordinate staff in the day to day performance of their jobs and has management level authority for personnel actions.
• Trains and coaches information security staff on the various security technologies and alerts to ensure proper response and risk mitigation.
• Ensures Infosec project / department milestones and goals are met and adhere to approved budgets.
• Creates information security metrics and analyze over time to assist Director Information Security with the development of information security plans and strategic goals.
• Leads incident management command centers and activities in the event of a data breach or high risk vulnerability, identify the security risks involved and resolve them.
• Performs security risk assessments and coordinate organizational actions to resolve.
• To review the security plans that have been implemented on the systems throughout the entire network of the organization, thus acting as an information security consultant.
• To act as a liaison to the department of information system and to monitor its compliance and direct the unsolved issues to the appropriate department.
• Provide information…