Information Security Specialist

Required Skills & Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field
• 3+ years of relevant information security experience
• Information security or IT experience within a healthcare provider setting
• Familiarity with security frameworks such as NIST CSF and risk management methodologies
• Knowledge of HIPAA, PCI, and HITECH regulatory requirements
• Knowledge of patch management, firewalls, and intrusion detection and prevention systems
• Experience analyzing logs, forensic evidence, and attack artifacts during cyber incident investigations
• Experience using vulnerability scanning solutions
• Understanding of TCP/IP, networking ports, protocols, traffic flow, system administration, the OSI model, and defense-in-depth
• Strong analytical, problem-solving, communication, organizational, and decision-making skills
• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Experience developing information security policies and procedures

Nice to Have Skills & Experience

• CISSP, HCISPP, CompTIA Security+, or ISACA certification
• SIEM-specific training or certification
• Experience with mobile operating systems, including Android, iOS, and Windows
• Experience with VMware, Citrix, and other core infrastructure components
• Experience with MFA, VPN, Active Directory, and other access-control systems
• Experience conducting internal and external technical security audits
• Experience assessing third-party vendors and reviewing application security questionnaires
• Experience with data loss prevention, incident response, disaster recovery, and business continuity planning
• Experience supporting biomedical or patient-treatment systems

Job Description

Insight Global is seeking an Information Security Specialist to support enterprise cybersecurity and technology risk-management initiatives within a healthcare provider environment. This individual will assess information systems, evaluate the security posture and risk of critical organizational assets, and help implement security measures that protect systems, networks, and data. The specialist will monitor access-control technologies such as MFA, VPN, and Active Directory; conduct vulnerability scans, risk assessments, and technical security audits; and analyze security incidents to determine their root cause. This person will also assign and track remediation activities, maintain technical exception lists, review vendor and application security questionnaires, validate third-party security controls, and recommend security enhancements, services, and tools. Additional responsibilities will include maintaining incident response, disaster recovery, and business continuity plans; supporting data loss prevention and service-continuity efforts; participating in change-management processes; and helping develop information security policies and procedures. The ideal candidate will be a collaborative team player who can partner effectively with the CISO, privacy, compliance, legal, risk, application, infrastructure, engineering, vendor, and consulting teams to strengthen cybersecurity practices and control effectiveness across the enterprise.