Information Security Specialist
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
By continuing, you agree to our Terms & Privacy Policy.
Location:Philadelphia, PA (hybrid)
Type: Contract
Our direct client is seeking a InfoSec Specialist with demonstrated experience leading security design for new technologies across the full lifecycle, from initial evaluation through implementation. The ideal candidate has technical experience with security logging and security monitoring technology (i.e. security incident and event management technology, managed detection and response technology, etc.), Microsoft technology experience, experience working with Managed Security Service Providers (MSSPs) and Cloud providers, and experience with managing governance over security initiatives, such as security logging governance.
The InfoSec Specialist must be able to work independently and draw upon extensive professional knowledge and experience to make independent judgement regarding analysis, evaluation, development, and implementation of enterprise long-term solutions and operating initiatives. Excellent communication and documentation skills are a must.
The position is primarily remote; however, there is potential to come on site so local candidates highly preferred. Security certifications are preferred but not required.
Key Accountabilities:
- RFP and technology evaluation: Develop or tailor security requirements and questions based on the technology being evaluated; assess vendor responses; identify security considerations and risks; and document clear, actionable recommendations.
- Security architecture and design: Partner closely with the Security Architect to translate approved architecture, standards, and requirements into practical security designs for selected technologies.
- Security engineering and implementation: Engineer security controls and configurations and work collaboratively with technical, application, infrastructure, vendor, and project teams through build, implementation, validation, and transition to operations.
- Security-by-design mindset: Quickly learn unfamiliar healthcare technologies, understand their architecture and data flows, identify the security considerations that matter most, and apply appropriate controls early in the technology lifecycle.
- Communication and collaboration: Demonstrate strong written and verbal communication skills, with the ability to explain technical security requirements and recommendations clearly to both technical and non-technical stakeholders and work effectively across multidisciplinary teams.
- Bachelor's degree in Computer Science, Information Systems, or related field.
- At least twelve (12) years of industry-related experience, including experience in one to two IT disciplines (such as technical architecture, network management, application development, middleware, information analysis, database management, or operations) in a multitier environment.
- At least six (6) years of experience with information security, regulatory compliance and risk management concepts.
- At least three (3) years of experience with Identity and Access Management, user provisioning, Role-Based Access Control, or control self-assessment methodologies and security awareness training.
- Experience with Cloud and/or virtualization technologies.
- Comprehensive knowledge and understanding of Information Security principles, general and IT controls (e.g., access controls, risk management, change management, cloud security) and related information security policies and procedures.
- Knowledge of industry regulatory standards and accreditation requirements or control frameworks (HIPAA, PCI, Joint Commission, NIST, Red Flags, and ISO 27000 series).
- Comprehensive knowledge of information security regulations, standards and leading practices, including understanding of EHR, cloud frameworks, identity access controls.
- Good knowledge of basic database query techniques and data mining to analyze data or other related database functionality.
- Knowledge of Microsoft Active Directory, UNIX, and Clinical applications is a plus.
- Experience implementing application-level security in clinical and financial systems (e.g., Epic, Lawson). ERP experience is a plus.
- General understanding of networking and communication techniques including WANs, LANs, Internet, Intranet, protocols, such as TCP/IP and their impact on security.
- Experience with industry standard SDLC methodologies; hands-on experience in Project Server methodologies, PMO project management skills, including use of MS productivity tools (Access, Word, PowerPoint, Visio, and Project).
- Experience with risk management frameworks.
- Ability to understand and comply with all enterprise and IS departmental information security polici
-
Information Security Specialist
2 days ago
Philadelphia, PA, United States Dale Workforce Solutions Full-timePrincipal Information Security Specialist Demonstrates specialized & comprehensive knowledge in Information security management practices, disciplines, regulations, industry standards, related frameworks, project management principles, and methodologies, security engineering concepts, security operations model; industry standards around architecture...
-
Information Security Specialist
3 days ago
Philadelphia, PA, United States Jooble Full-timeDescription We are seeking a cybersecurity professional to support the evaluation, design, and implementation of secure enterprise technologies. This position will work across security, architecture, infrastructure, application, vendor, and business teams to identify security risks and ensure appropriate controls are incorporated throughout the technology
-
IS Principal Information Security Specialist
2 days ago
Philadelphia, PA, United States Dale Workforce Solutions Full-timeJob Summary: Demonstrates specialized & comprehensive knowledge in Information security management practices, disciplines, regulations, industry standards, related frameworks, project management principles, and methodologies, security engineering concepts, security operations model; industry standards around architecture principles. Demonstrates...
-
IS Principal Information Security Specialist
2 days ago
Philadelphia, PA, United States Talent Groups Full-timeLocation Details: Philadelphia, PA - Primarily remote, however there is potential to come onsite so local candidates highly preferred Duration: 11 months to start Job Description Demonstrates specialized & comprehensive knowledge in Information security management practices, disciplines, regulations, industry standards, related frameworks,...
-
Information Security Specialist
5 days ago
Philadelphia, PA, Philadelphia County, PA; Pennsylvania, United States Full-timeDescription We are seeking a cybersecurity professional to support the evaluation, design, and implementation of secure enterprise technologies. This position will work across security, architecture, infrastructure, application, vendor, and business teams to identify security risks and ensure appropriate controls are incorporated throughout the technology
-
Information System Security Specialist II
2 days ago
Philadelphia, PA, United States ATG Full-timeJob Title: Information System Security Specialist Clearance: Secret Work Location: Philadelphia, PA Employment Type: Full-Time *Position is contingent upon award* About the Company Athena Technology Group, Inc. (ATG) is a Service-Disabled Veteran Owned Small Business (SDVOSB) and Historically Underutilized Business Zone (HUBZone) established in 2010. ATG...
-
Information System Security Specialist III
2 days ago
Philadelphia, PA, United States Constellation West Full-timeROLE: Information System Security Specialist III REQUIRED: Active, final Secret clearanceActive IAT II certificationAbility to work onsite at either NSWC-PD or a regional Contractor officeDemonstrable 5 YoE in the following Cybersecurity, Engineering, Test and Evaluation (T&E) or Authorization and Assessment (A&A) (formerly C&A) related field. Information...
-
Principal Information Security Specialist
1 week ago
Philadelphia, PA, PA, United States Akkodis Full-time $176,800 - $187,200 Contract**Akkodis** is seeking a **Principal Information Security Specialist** for a **Contract** job with a client in **Philadelphia, PA** . **Rate Range:** $85/hour to $90/hour; The rate may be negotiable based on experience, education, geographic location, and other factors. **Job Summary:** Demonstrates specialized & comprehensive knowledge in Information...
-
L3 Information Security Specialist
1 week ago
Philadelphia, PA, PA, United States Partner's Consulting, Inc. Remote Full-time**Title:** Principal Information Security Specialist **Location:** Philadelphia, PA (hybrid) - Mostly Remote with some onsite trips **Type:** Contract Our direct client is seeking a Principal Information Security Specialist who has technical, hands-on experience with information security project implementations and will serve as subject matter expert and...
-
IS Principal Information Security Specialist
1 week ago
Philadelphia, PA, PA, United States Children's Hospital of Philadelphia Full-time $4,833 Contract**Job Title:** IS Principal Information Security Specialist **Location:** Primarily remote, with potential onsite requirements. Local candidates highly preferred. **Job Summary:** Demonstrates specialized and comprehensive knowledge in information security management practices, disciplines, regulations, industry standards, related frameworks,...