Information Security Engineer

Essential Functions

• Determines enterprise information assurance and security standards
• Assists with the management of information security
• Manages any potential audits, interfacing with internal and external auditors
• Manage security cases
• Performs quarterly security checks
• Drives business continuity/disaster recovery activities and coordinates disaster recovery exercises
• Develops and reviews policies, procedures, standards, and other documents supporting information security
• Conducts regular network and application vulnerability scans and manages remediation of vulnerabilities
• Works with Managed Security Solution Provider (MSSP) to ensure coordination of security monitoring and incident response
• Performs continuous security assessments for new and existing projects
• Defines security controls based on risk assessments
• Administers security awareness training to all CHN employees and contractors
• Manage information security related projects
• Keeps up to date with threats, vulnerabilities, and attacks
• Participate in third-party risk management activities
• Upholds organizational values and standards, while proactively seeking ways to improve efficiency, equity, and service excellence 
• Ensure compliance with all CHN and affiliate policies, as well as all state and federal regulations 
• Provides positive and development feedback and accountability related to all practices 
• Demonstrates commitment to CHN and Planned Parenthood’s health equity mission, with emphasis on racial equity and community accountability. Demonstrates dedication to learning about racial equity and addressing structural racism in healthcare 
• Consistently delivers high-quality results using sound judgment and data-driven decisions. Prioritizes customer needs by providing prompt, accurate service to all stakeholders  
The above duties and responsibilities are not an exhaustive list of required responsibilities, duties, and skills. Other duties may be added, and this job description can be amended at any time.

Qualifications and Experience (Required)

• Minimum of 4 years of experience in the field
• Demonstrated knowledge of information, security concepts, standards, and regulations (HIPAA, PCI preferred)
• Excellent written and verbal communication skills
• Ability to take ownership, manage projects, and archive results in dynamic environments
• Demonstrated experience in a multistate/multi-affiliate environment
• Technical experience with information, security, networks, security tools, modern application development, and web technologies
• Security certifications: CISSP, CISA, ISO 2700 LA/LI, and SANS
• Demonstrated ability to maintain a customer-centric service approach in a fast-paced environment
• Strong attention to detail and follow-up; and ability to multi-task in a fast-paced environment
• Demonstrated dedication to Planned Parenthood’s mission, vision, and values
• Excellent time management

Qualifications and Experience (Preferred)

• Excellent written and verbal communication skills and ability to collaborate and interact with all levels within and outside of CHN if necessary
• Strong interpersonal skills and the ability to build relationships with stakeholders, including staff, board members, and external partners
• Ability to work independently and with professional discretion
• Excellent problem-solving skills

Key Requirements

• Commitment to advancing race(+) equity in one’s work: interested in expanding knowledge about the role that racial inequity plays in our society
• Awareness of multiple group identities and their dynamics, bringing a high level of self-awareness about personal identity, empathy, and humility to interpersonal interactions
• Demonstrated ability to communicate clearly and directly as well as hear and act on feedback related to identity and equity with the aim to learn
• Strong sense of accountability to equitable practices
• Understanding of the impact of identity dynamics on organizational culture
• Commitment to CHN and Planned Parenthood’s In This Together service ethos, workplace values, and service standards