Leidos is looking for an Information Assurance Engineer / Technical Analyst Security Rule SME at multiple customer sites around the US. Location options include: Atlanta, Boston, Chicago, Dallas, Washington, D.C., Denver, Los Angeles, New York City, Philadelphia, and San Francisco. Please note there is no relocation.
This is a multi-year contract with anticipated start in mid-2022.
Primary responsibilities include:
Reviews security and privacy complaints, data breach notification and cybersecurity incident reports, and other correspondence and evidence to determine whether the complaint, self-report or breach notification report indicates non-compliance with the HIPAA Security Rule. Reviews data provided by the healthcare organizations across the nation to assess the overall impact of security and privacy incidents.
Evaluates and determines the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests (i.e. Assessing reports related to security baselines, penetration tests, vulnerability assessments, and digital forensics). Develop reports summarizing the analysis along with formulating recommendations for OCR to consider for future action.
Develops written reports with technical security analyses, summaries, and recommendations for action.
Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices (ISO) and implementation specifications of the HIPAA Security Rule.
Provides expert guidance in designing, implementing, and managing information security, data protection, and risk management programs, including policies, procedures, and controls for protected health information based on HIPAA requirements.
Provides advisory expertise in the areas of risk analyses, vulnerability assessments, incident response, security architecture, physical security, business continuity and disaster recovery, enterprise mobility, threat intelligence and analysis, security awareness and online safety, and resolution of highly complex security projects and issues.
Expert in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information; de-identified / re-identified health information; limited data sets
Bachelor’s degree from an accredited college in a related discipline, or equivalent experience/combined education, with at least 8 years of professional experience of specific, hands-on experience actually doing work described in the preceding section
In-depth experience with security domains and industry best practices; business continuity and disaster recovery, supply chain and third party management; and up to date on evolving cyber-threats, defense strategies, and emerging technology.
Excellent written and oral communication skills.
Ability to translate and communicate highly technical matter to a non-technical audience.
Knowledge of HIPAA Privacy, Security, and Breach Notification Rules, other Security regulations, and industry best practices and standards (NIST, ISO, Sarbanes-Oxley, FISMA, COBIT).
Proficiencies in: Information governance and risk management, threat and vulnerability management, vendor management, infrastructure, security architecture for traditional, wireless, and cloud-hosted networks, cryptography/encryption protocols, business continuity and disaster recovery, social engineering and awareness training methodologies.
Master’s degree in computer science, Information Technology, Cybersecurity or related field.
Industry certification preferably CISSP, CISM, and CIPM/CIPP/CIPT.
Location options include: Atlanta, Boston, Chicago, Dallas, Washington, D.C., Denver, Los Angeles, New York City, Philadelphia, and San Francisco. Please note there is no relocation.
Please note the approved salary for this position will be around $120,000.
Pay Range:Pay Range $94,250.00 - $145,000.00 - $195,750.00
In order to enter Leidos facilities in the U.S. and to attend Leidos events outside our facilities, employees are required to be vaccinated for COVID-19 or maintain proof of a negative COVID-19 test within 96 hours of entry. In addition, we are receiving guidance from certain customers that onsite contractor personnel will need to be fully vaccinated to access customer facilities. If you are not vaccinated, please consider getting your COVID-19 vaccination as soon as possible. If you have any questions, please contact your Talent Acquisition POC.
Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $13.7 billion for the fiscal year ended December 31, 2021. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.
Securing Your Data
Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [email protected].
Commitment to Diversity
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.