Job Description

Harris Ambulatory Care Enterprise is looking for Information Security Specialist to join our dynamic team and embark on a rewarding career journey Information security, often referred to as cybersecurity, is the practice of protecting digital information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction It involves implementing measures to ensure the confidentiality, integrity, and availability of information, as well as mitigating risks and responding to security incidents Here are some key aspects of information security:Risk Assessment: Conducting risk assessments to identify potential vulnerabilities, threats, and risks to information and systems This involves evaluating the likelihood and potential impact of security incidents and prioritizing actions based on the level of risk Security Policies and Procedures: Developing and implementing security policies, standards, and procedures to guide the organization's information security practices These documents outline the rules, responsibilities, and best practices for protecting information assets Access Control: Implementing access controls to restrict access to sensitive information and systems This involves using mechanisms such as user authentication, authorization, and privileges management to ensure that only authorized individuals can access and perform specific actions on information resources Network Security: Implementing measures to secure computer networks and protect against unauthorized access or attacks This includes using firewalls, intrusion detection and prevention systems, virtual private networks (VPNs), and network segmentation to safeguard network infrastructure Data Protection: Implementing data protection measures to ensure the confidentiality and integrity of data This includes encrypting sensitive data, implementing data loss prevention (DLP) solutions, and establishing backup and recovery procedures to safeguard against data breaches or loss Security Awareness and Training: Providing education and training to employees to raise awareness about information security best practices This includes promoting secure behavior, such as strong password management, recognizing phishing attempts, and handling sensitive information appropriately

More Info

Education