Description

The Information Security Architect provides support and direction for various components of the medical center's information security program. This position is the technical lead for coordinating and leading efforts to detect, analyze and respond security incidents and breaches. Works with the security team and other IT areas to create and implement procedures for responding to security incidents. Designs, modifies, and implements SIEM detection criteria. This position is the principal point of contact in working with the medical centers contracted SOC and is also the escalation point of contact for security and IT team members when responding to security incidents. The Information Security Architect seeks to understand and review business processes to see where and how security controls might be implemented to reduce risk and improve on compliance with HIPAA, PCI, and other best practice security frameworks. Under general supervision, the Information Security Architect supports the medical center's information security posture and performs various duties primarily focused on protecting the information assets and security posture of Torrance Memorial.

Core Competencies

Establishes system controls by developing framework for controls and levels of access; recommends improvements. Ensures authorized access by investigating improper access; revoking access; reporting violations; monitoring of alerts, logs, and security reports. Leads the technical response to security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, data breaches, and other events and alerts detected by security controls   Advises management and develops and executes plans for compliance and mitigation risk  Investigates intrusion attempts, security incidents, malware infections, exploit attempts, and other alerts and events detected by medical center security controls  Advises management on risk mitigation, threat hunting discoveries, methodologies to better detect and respond to events and alerts Maintains and supports security controls including SIEM, secure email gateways, firewalls, and other detection technologies