Information Security Engineer
San Francisco, CA

Job Description

Overview

Allscripts is seeking an individual to help secure its critical data assets. Reporting to the Universal Data Platform team, this person will monitor the confidentiality, integrity, and availability of the Veradigm business division.

The Information Security Engineer coordinates information security initiatives in coordination with Veradigm's VP of Information Security. The ideal candidate will have a broad technical background with a strong focus on data and cloud security.

Responsibilities

* Provide oversight for HIPAA specific data encryption schemes
* Integrate Imperva Database Activity Monitoring to track access to critical data assets
* Provide insight to architects on roles-based access controls as well as mandatory and discretionary access controls
* Regularly audit access controls to ensure standards are being upheld
* Provide audit reports for compliance needs


* Provide security reviews for Veradigm's Universal Data Platform. This includes but is not limited to:
* HIPAA requirements for encryption given a healthcare database schema
* Coordination with Compliance and Governance teams to document standards and procedures in alignment with Allscripts policies


* Validate HITRUST, NIST CSF, and ISO requirements for various products which integrate with the Veradigm UDP platform
* Manage information security projects in collaboration with Operations, DevOps, and Software Engineering organizations
* Coordinate with Allscripts Privacy and Security teams for alignment to company policies and compliance requirements
* Improve security data analytics by integrating cloud services with Splunk

Qualifications

Academic and Professional Qualifications:

* Bachelor's Degree with a major in Computer Science or related
* Deep technical understanding of security vulnerabilities and risks, as well as countermeasures and compensating controls
* Strong demonstrated knowledge of network, server, desktop, storage, and database infrastructure and how security relates to the overall IT and business environment.
* Development background is strongly preferred
* Previous vulnerability management experience; penetration testing is preferred
* Demonstrated professional experience in preparing and presenting information effectively, clearly, and concisely, in written and spoken form.
* Clear communicator and good interpersonal skills

Experience:

* Minimum of 5 years professional experience in the Information Security industry, to include knowledge and understanding in the areas of the Software Development Life Cycle (SDLC), IT Operations, Data Center Operations, IT Project Management, and IT auditing/compliance.
* Minimum of 3 years practical experience designing and implementing enterprise information technology security services.

Travel Requirements:

* Occasional overnight travel

Working Arrangements:

At Allscripts, our greatest strength comes from bringing together talented people with diverse perspectives to support the technology needs of 180,000 physicians, 1,500 hospitals and 10,000 postacute organizations across the globe. Allscripts offers a comprehensive compensation and benefits package, including holidays, vacation, medical, dental, and vision insurance, company paid life insurance and retirement savings.

Allscripts' policy is to provide equal employment opportunity and affirmative action in all of its employment practices without regard to race, color, religion, sex, national origin, ancestry, marital status, protected veteran status, age, individuals with disabilities, sexual orientation or gender identity or expression or any other legally protected category. Applicants for North American based positions with Allscripts must be legally authorized to work in the United States or Canada. Verification of employment eligibility will be required as a condition of hire.

From a "VEVRAA Federal Contractor" We request Priority Referral of Protected Veterans