Manager of Information Systems Security - IAM - Hybrid

Baylor Scott & White Health - Dallas, TX

Full-time - Manager

Dallas, TX

Hospitals

About the position

The Manager of Information Systems Security will oversee the development and implementation of information security policies and best practices, ensuring compliance with legal and contractual mandates. This role involves managing security audits, vulnerability assessments, and leading efforts to mitigate risks associated with identity and access management (IAM). The manager will collaborate with IS Directors and leadership to establish security standards and assist in budget planning.

Responsibilities

• Ensure all system platforms are functional and secure.
• Manage security audits, vulnerability, and threat assessments.
• Direct responses to network or system intrusions.
• Review, implement, update, and document companywide information security policies and procedures.
• Work with upper management to establish acceptable levels of risk for enterprise computing platforms.
• Assess potential threats and weaknesses in existing IAM processes and procedures.
• Provide solutions for governance of identity lifecycle processes around roles/rules.
• Monitor access control processes to ensure effectiveness and compliance with standards.
• Lead, develop, and document IAM standards and controls.
• Implement procedures to ensure defined standards and controls are operating effectively.
• Develop support and sustainability procedures for ongoing operations related to Security Operations Management and IAM initiatives.
• Provide workflow recommendations related to provisioning processes and compliant entitlement management.

Requirements

• Bachelor's degree in a related field or equivalent work experience.
• 5+ years of professional experience related to Identity and Access Management and Security programs.
• Experience with vulnerability assessment and management.
• Knowledge of PCI and NIST standards.
• Strong project management skills.
• Excellent leadership and communication skills.

Nice-to-haves

• Functional experience with Identity, Security, and/or eGRC product suite.
• Understanding of authorization/access control models.
• Practical understanding of role and rule-based access control models.
• Familiarity with Information Security frameworks and best practices (e.g., PCI, ISO, NIST).

Benefits

• Health insurance
• Tuition reimbursement
• Paid time off
• 401(k) savings plan with dollar-for-dollar match up to 5%