Information Technology Security Officer

Job Description

POSTING TITLE

Information Technology Security Officer

DESIRED CAREER LEVEL

SME

EDUCATION LEVEL

Masters

REUESTING AGENCY

MS State Department of Health

WORK LOCATION

570 East Woodrow Ave, Jackson, MS 39216

REMOTE OPTION

Onsite in MS a minimum of 1 week per month plus during an emergency defined by the State Health Office or as negotiated between the contractor and the agency.

ON-CALL REQUIRED

Yes- Incident Response Team

OVERTIME

Occasional Overtime

TRAVEL FREQUENCY

Occasional; In / Out of state. Travel does NOT include relocation or expenses incurred when reporting for onsite work. Expenses are for local required travel only.

EXPENSES REIMBURSED

Yes- Occasional travel with expenses reimbursed

CRIMINAL BACKGROUND CHECK & DRUG SCREEN REQUIREMENT

Fingerprint Screen

PROJECT NAME

Information Security

JOB DESCRIPTION

Under 45 CFR §164.308, as a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), MSDH is required to identify a Security Officer responsible for the development and implementation of policies and procedures to ensure the integrity of electronic Protected Health Information (ePHI) created, transmitted, received and / or stored by the agency. This individual, designated as the IT Security Officer (ITSO), also is required by the state Department of Information Technology Services (ITS) under Rule 1.6 of the ITS Enterprise Security Policy. Under this rule, the ITSO is responsible for :

• Developing and maintaining agency-specific security plans, policies, and procedures.
• Interacting with ITS as the primary contact for security related issues.
• Ensuring MSDH is adhering to the State of Mississippi Enterprise Security Policy.
• Participating in the state information security threat intelligence feeds.
• Researching IT industry for security related issues and how it affects MSDH specifically.
• Monitoring security applications, activity logs, resources and issues within the agency utilizing approved security software and hardware.
• Facilitating the State Auditor's Information Systems Audit and any Third-Party Risk Assessments.
• Manage the agency's Vulnerability Management and Supply Chain risk programs

REQUIRED SKILLS / EXPERIENCE

PREFERRED SKILLS

Local Candidate Preferred