Information Security Specialist (Remote)

Overview

The ideal candidate will have extensive experience in developing and implementing security policies, plans, procedures, and disaster recovery strategies tailored specifically for dental offices. This role requires a deep understanding of the unique regulatory requirements and compliance standards in the healthcare industry, particularly those relevant to dental practices.

Responsibilities

Principal Duties and Responsibilities (Essential Functions**): 

• Develop and maintain comprehensive information security policies, including but not limited to data protection, access control, incident response, and risk management, specifically tailored for dental office environments. 
• Create and implement robust security plans and procedures to safeguard sensitive patient information, electronic health records (EHR), and other critical assets. 
• Conduct thorough risk assessments to identify potential security vulnerabilities and recommend appropriate mitigation measures to protect against data breaches and cyber threats. 
• Collaborate with dental office staff and management to ensure compliance with relevant regulatory requirements, such as HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act). 
• Design and oversee the implementation of disaster recovery and business continuity plans to ensure uninterrupted operations in the event of natural disasters, cyberattacks, or other emergencies. 
• Stay informed about emerging cybersecurity threats, industry best practices, and regulatory changes affecting the dental healthcare sector, and incorporate this knowledge into security strategies and initiatives. 
• Provide ongoing security awareness training and education to dental office personnel to promote a culture of security awareness and compliance. 
• Collaborate with IT teams and external vendors to deploy and maintain security technologies, such as firewalls, intrusion detection/prevention systems, encryption tools, and endpoint security solutions. 
• Conduct regular security audits and assessments to evaluate the effectiveness of existing security controls and identify areas for improvement. 
• Serve as a subject matter expert on information security matters, providing guidance and support to dental office staff and management as needed. 
• Conduct penetration testing, vulnerability assessments, and security audits to ensure the effectiveness of security measures in place. 

Work Environment:  

This job is primarily remote but may operate in a professional office environment if needed. This role routinely uses standard office equipment such as but not limited to computers, phones, webcams, and copiers. 

Physical Demands: 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. 

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; use hands to finger, handle or feel; and reach with hands and arms. 

Limited travel may be required for this position. 

Competencies: 

• Drives Results – Consistently achieving results, even under tough circumstances. Persists in accomplishing objectives despite obstacles and setbacks. Pushes self and helps others achieve results.  

• Manage Complexity – Making sense of complex, high quality, and sometimes contradictory information to effectively solve problems. Acquires data from multiple and diverse sources when solving problems. Evaluates pros and cons, risk and benefits of different solution options. 

• Communicates Effectively – Developing and delivering multi-mode communications that convey a clear understating of the unique needs of different audiences. Is effective in a variety of communication settings: one-on-one, small and large groups, or among diverse styles and position levels. Provides timely and helpful information to others across the organization. 

• Ensures Accountability – Holding self and others accountable to meet commitments. Follows through on commitments and makes sure others do the same. Acts with a clear sense of ownership. 

• Action Orientated – Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.  Identifies and seizes new opportunity. Steps up to handle tough issues.  

• Collaborates – Building partnerships and working collaboratively with others to meet shared objectives. Partners with others to get work done. Gains trust and support of others. 

Qualifications

Education & Qualifications/Training: 

Education: 

• Bachelor's degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) preferred. 

• Industry Certifications desired (ie. CompTia Security , CISSP) 

Qualifications/Training:  

• Ability to prioritize projects. 
• An understanding of industry security protocols and best practices for implementing, managing, and reporting anomalies within the security sector. 
• Minimum of 5 years of experience in information security roles, with specific experience in developing security policies, plans, procedures, and disaster recovery strategies for healthcare organizations, preferably dental offices. 
• Intermediate to advanced experience with the use and application of the most current technologies and products used in the industry. 
• In-depth knowledge of relevant regulatory requirements and compliance standards, including HIPAA, HITECH, and PCI DSS (Payment Card Industry Data Security Standard), as they relate to dental practice operations. 
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop practical, risk-based solutions. 
• Excellent communication and interpersonal skills, with the ability to effectively engage and collaborate with stakeholders at all levels of the organization. 
• Demonstrated experience in project management, including the ability to prioritize tasks, manage deadlines, and coordinate cross-functional teams. 
• Proficiency in security assessment tools and techniques, as well as familiarity with security technologies and best practices relevant to dental office environments. 
• Commitment to continuous learning and professional development in the field of information security, including staying up to date on emerging threats and industry trends. 
• Ability to troubleshoot data flow processes, translation maps. 
• Advanced knowledge of Microsoft technologies and environments.   

** To comply with regulations by the American with Disabilities Act (ADA), the principal duties in job descriptions must be essential to the job. To identify essential functions, focus on the purpose and the result of the duties rather than the manner in which they are performed. The following definition applies: a job function is essential if removal of that function would fundamentally change the job.