#121585 Cybersecurity Architect - Remote

Placement within the salary range is determined by internal equity, relevant qualifications, and collective bargaining agreements (when applicable).

DESCRIPTION

Cybersecurity expert whose primary responsibility involves ensuring cybersecurity security solutions are properly integrated with technologies to maximize benefit and achieve security objectives to protect data, systems, networks and cloud resources used throughout UC San Diego Health. Plans, configures, designs, develops, implements and maintains tools, systems and procedures to insure the integrity, reliability and security of data, systems and networks. Technical leader with a high degree of knowledge in the overall field of cybersecurity and recognized expert in securing systems and protecting data. Problem-solving skills frequently requiring analysis of unique issues / problems without precedent and / or structure. Manage projects that include formulating strategies, processes, functions, budget and resources needed with a high degree of autonomy.

MINIMUM QUALIFICATIONS

• Eleven (11) years of related experience, education/training, OR a Bachelor’s Degree in related area plus seven (7) years of related experience/training. Note: Related experience includes selecting security solutions to be used across an enterprise based upon specific security goals, determine and plan how the solution would be deployed to meet objectives, execute deployment and transition support to operational teams. Experience evaluating existing security solutions and identifying opportunities to get more value by leveraging unused capabilities or new features after upgrading the system.

• Thorough understanding of the risk assessment requirements and demonstrated skills to help conduct, analyze and document risk assessments at the enterprise level as defined in HIPAA and HITECH.

• Advanced knowledge of IT security. Extensive expertise in conducting technology risk assessments. Advanced experience with implementing security controls for web application, cloud solutions, networks, endpoints using industry preferred security solutions to protect sensitive data and critical infrastructures.

• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.

• Understanding of network/host firewalls, application gateways/proxies, anti-malware, patch management, disk encryption, centralized configuration, log management, system hardening practices, etc.

• Proven skills applying security controls to computer software and hardware. Solid understanding of information security policies, standards, industry best practices, and frameworks. (ISO 27K, NIST 800-115, PCI DSS, HIPAA, FERPA, etc.).

• Broad knowledge of other areas of IT. Knowledge of networking technology.

• Advanced knowledge of data encryption technologies and experience selecting and applying appropriate data encryption technologies. Expert understanding of cryptography and strengths/weaknesses of various encryption ciphers and hash functions.

• Demonstrated skill at analyzing and preventing security incidents of high complexity.

• Thorough knowledge of secure hardware, software and network design techniques. Ability to give work direction, create task assignments, and give instructions to subordinate technical staff to accomplish project goals/milestones.

• Advanced interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization. Ability to quickly develop knowledge of department processes and procedures.

PREFERRED QUALIFICATIONS

• Healthcare experience.

• Experience selecting, architecting and implementing security controls for Microsoft O365 and Amazon Web Services to protect identifiable, or other highly sensitive data.

SPECIAL CONDITIONS

• Required to attend onsite critical meetings.

• Must be able to work various hours and locations based on business needs.

• Employment is subject to a criminal background check and pre-employment physical.

Job offer is contingent on successful engagement in the UC COVID-19 Vaccination program (fully vaccinated with documented proof or approved exception/deferral).

If applicable, life-support certifications (BLS, NRP, ACLS, etc.) must include hands-on practice and in-person skills assessment; online-only certification is not acceptable.

UC San Diego Health is the only academic health system in the San Diego region, providing leading-edge care in patient care, biomedical research, education, and community service. Our facilities include two university hospitals, a National Cancer Institute-designated Comprehensive Cancer Center, Shiley Eye Institute, Sulpizio Cardiovascular Center, the only Burn Center in the county, and and dozens of outpatient clinics. We invite you to join our team!

Applications/Resumes are accepted for current job openings only. For full consideration on any job, applications must be received prior to the initial closing date. If a job has an extended deadline, applications/resumes will be considered during the extension period; however, a job may be filled before the extended date is reached.

To foster the best possible working and learning environment, UC San Diego strives to cultivate a rich and diverse environment, inclusive and supportive of all students, faculty, staff and visitors. For more information, please visit UC San Diego Principles of Community.

UC San Diego Health is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, age, protected veteran status, gender identity or sexual orientation. For the complete University of California nondiscrimination and affirmative action policy see: http://www-hr.ucsd.edu/saa/nondiscr.html

UC San Diego is a smoke and tobacco free environment. Please visit smokefree.ucsd.edu for more information.

UC San Diego Health maintains a marijuana and drug free environment. Employees may be subject to drug screening.