Information Security Manager

At the Center for Health Information and Analysis (CHIA), we serve as stewards of Massachusetts health data, employing multifaceted datasets and cutting-edge analytics to ensure transparency in our healthcare system. By joining CHIA as Information Security Manager, you'll become emersed into one of the largest and most disparate collection of healthcare data in the Commonwealth and play a pivotal role in the stewardship and success of CHIA's influential and essential healthcare analytics products.

In this exciting role, you will use your expertise in Azure cloud services to design and implement advanced security controls in alignment with cloud security best practices. You will use your excellent communication skills to partner and collaborate with the leaders of CHIA's IT operations, application development, and data operations to realize CHIA's technical agenda.

At CHIA, we foster a flexible, collaborative environment, offering a hybrid model that balances in-person and remote work. Our hybrid model includes working from our vibrant Boston office at 501 Boylston Street for at least two designated days per week, with the flexibility to work remotely on others.

Specifically, as the Information Security Manager, you will have the opportunity to:

• Spearhead Security Directives: As an independent contributor, utilize your knowledge of CNAPP and other tools to successfully implement complex technical and security projects for continued improvement of CHIA's security and compliance posture.

• Champion Security Awareness: Keep current with industry trends and information security solutions and tools as they relate to the technical and business problems CHIA faces and work with the organization to continue to evolve our capabilities and infrastructure. Provide on-going security awareness training to CHIA employees.

• Serve as Technical Leader: within the Information Security team on emerging security technologies. Support through collaboration and contribute expertise to the implementation of new security controls to enhance operational resilience.

• Cloud Environment Expert: Proven expertise in securing cloud environments.

• Strong Technical Skills , specifically:

• Vulnerability and compliance management expertise with associated tools.

• Cloud security and network architecture components and best practices.

• Threat research and risk management expertise.

• In-depth knowledge of security frameworks such as NIST 800-53.

• Firewall management and support.

• Skilled in implementing and managing endpoints in Intune and Defender.

• Experience with SIEMs, using them to resolve incidents and alerts.

• Expert troubleshooting skills.

• Effective Communicator: Demonstrate excellent written and verbal communication skills, with an ability to articulate complex technical issues clearly and persuasively. Engage stakeholders and foster collaboration through compelling communication.

• Educational Foundation: Possess a bachelor's degree in computer science, information systems or engineering providing the necessary foundational skills for success in this role.

• Specialized Expertise: Bring at least 5 years of professional experience, with at least 3 years of demonstrated proficiency in working with Azure or Amazon web services.

This position will remain open until filled. We value the talent and expertise you bring to the table, so we offer a competitive salary range of $100,000 - 115,000 for this position.

Comprehensive Benefits:

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

Want the specifics? Explore our Employee Benefits and Rewards! (https://www.mass.gov/commonwealth-employee-benefits-and-rewards)