Senior Cyber Security Advisor - SOC Incident Response - Prime Healthcare Management Inc

Prime Healthcare is an award-winning health system headquartered in Ontario, California. Prime Healthcare operates 45 hospitals and has more than 300 outpatient locations in 14 states providing more than 2.6 million patient visits annually. It is one of the nation’s leading health systems with nearly 50,000 employees and physicians. Fourteen of the Prime Healthcare hospitals are members of the Prime Healthcare Foundation, a 501(c)(3) not-for-profit public charity. Prime Healthcare is actively seeking new members to join our corporate team!

Company is an equal employment opportunity employer. Company prohibits discrimination against any applicant or employee based on race, color, sex, sexual orientation, gender identity, religion, national origin, age (subject to applicable law), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. The Company also prohibits harassment of applicants or employees based on any of these protected categories. Know Your Rights: https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf

The Senior Cybersecurity Advisor is to Lead and coordinate in the Computer Security Incident Response and Digital Forensics operations during a security incident to identify, quantify, and neutralize the threats to protect. This role will help develop innovative and effective procedures for the Security Operations Center to enhance response time, Inspire, mentor, train a diverse group of SOC Analysts and built a world class team of Cyber Security Incident Response and forensics experts. Train staff on security operations concepts, develop incident response and forensics management process, write correlations, and integrate intelligence data into monitoring and operations activities. Collaborate with cross-functional teams in reviewing the design and development of significant new information systems and applications and participate in the design and development of any significant changes to existing information systems and applications.

#LI-AS1 #remote

Required qualifications:

1. One or more current, applicable professional/technical certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Security Compliance Specialist (CSCS), Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), GPEN, GWAPT, SANS GIAC/GSEC, or CEH.
2. Bachelor’s degree in information systems, Computer Science, or related field with fifteen (15) years of cyber security experience, ten (10) years in cybersecurity operations, five (5) years hands-on in SIEM, Incident response, three (3) years in network intrusion detection.
3. Experience with Cyber incident management, response and reporting procedures.
4. Experience working with log management, security monitoring, vulnerability management and security incident/event management tools.

Preferred qualifications:

1. Experience with Information Security, Privacy, IT Audit, Compliance, and IT Management Standards, such as ISO/IEC 27001 and 27002, PCI-DSS, SSAE-16 SOC1 & SOC2, SOX, NIST 800-53, and the COBIT and COSO.
2. Experiences delivering large-scale, scalable technology infrastructure solutions to support rapid business growth.
3. Advanced knowledge of network and application vulnerability assessments, change control, business continuity planning, data privacy, and risk assessment frameworks and practices.