Corona, California

**Company :**

Highmark Health

**Job Description :**

**JOB SUMMARY**

This job is responsible for architecting, migrating, testing and validating workloads to the Cloud using proper data protection cloud practices within the data protection for data at rest, in motion, and in use. The incumbent will work within Information Security and along-side business and IT stakeholders in safeguarding important information and protecting against data compromise, theft, misuse, and loss. Will include data classification, how to secure and encrypt the data when using a Key Management System, and management of Digital Certificates.

**ESSENTIAL RESPONSIBILITIES**

+ Analyze and define Cloud Data Protection requirements from analysis of intake requests, projects, initiatives.

+ Develop Cloud Data Protection requirements from analysis of intake requests, projects, initiatives.

+ Environment Set-up, Analysis and Definition of Cloud Based Data Protection services.

+ Project Management of Cloud Based Data Protection Services.

+ Functional Testing of Cloud Based Data Protection Services.

+ Production Enablement of Data Protection Services.

+ Root Cause Analysis of production incidents .

+ Construct and test DLP policy functionality by triggering events (PII, PCI, PHI).

+ Identify High Value Assets by working with Business and Staff Groups to reduce DLP friction.

**EDUCATION**

**Required**

+ Bachelor's degree in Computer Engineering, Computer Science, Management Information Systems, Information and Decision Sciences or Cybersecurity Engineering

**Substitutions**

+ None

**Preferred**

+ Master's degree in Computer Engineering, Computer Science, Management Information Systems, Information and Decision Sciences or Cybersecurity Engineering

**EXPERIENCE**

**Required**

+ 3 year's in IT Security

+ 3 years in Data Loss Prevention

+ 3 years with functional and integration testing of Data Protection Processes

+ 3 years with Data Protection High Value Asset Identification

+ 1 year of Cloud experience including risk assessments, cloud testing, cloud data protection, cloud service enablement

**Preferred**

+ 3 years with Data Protection Incident Response

**LICENSES or CERTIFICATIONS**

**Required**

+ None

**Preferred** (any of the following)

+ Certified Information Systems Security Professional (CISSP)

+ Google Cloud Platform (GCP) - Foundation

+ Google Cloud Platform (GCP) - Architect

+ Azure Security

+ Certified Cloud Security Professional (CCSP)

**SKILLS**

+ Cloud Data Protection using Data Loss Prevention Toolsets, Configurations using Palo Alto PRISMA, Google Cloud Platform.

+ Data Loss Prevention Policy Tuning, Configurations, Functional Testing and Monitoring

+ Use Case Process Development, Process Mapping of Cloud Protection Services using HITRUST frameworks, NIST Cybersecurity Frameworks, CIS Top 20 Controls

+ Forcepoint DLP, Symantec DLP, Trend Micro Integrated DLP, Microsoft DLP, Digital Guardian, SecureTrust, Check Point, Code42, CA Data Protection, Comodo MyDLP

+ Knowledge of NIST, HITRUST, CIS, PCI, PHI Standards, Policies and Best Practices

**Language (Other than English):**

None

**Travel Requirement:**

0% - 25%

**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**

**Position Type**

Office-based

Teaches / trains others regularly

Occasionally

Travel regularly from the office to various work sites or from site-to-site

Rarely

Works primarily out-of-the office selling products/services (sales employees)

Never

Physical work site required

No

Lifting: up to 10 pounds

Constantly

Lifting: 10 to 25 pounds

Occasionally

Lifting: 25 to 50 pounds

Rarely

**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._

**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._

_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy._

_Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability.

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity ( _https://www.eeoc.gov/sites/default/files/migrated\_files/employers/poster\_screen\_reader\_optimized.pdf_ )

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Req ID: J189425

Corona, California

Invest in yourself by becoming part of the Highmark Health enterprise! Build and grow your career with the tools and resources you need to be successful in our innovative and transformational environment. From new hire training to advanced education opportunities, career planning is a continuous journey that leads to your personal and professional growth and our success.

Whether your focus is nursing, information technology, actuarial, finance, marketing, sales, operations or one of our many other professions, our companies offer opportunities to develop and expand your career while making health care accessible, understandable and affordable for our millions of members, patients and customers.

Similar jobs