JOB SUMMARY

Information Security & Risk Mgmt at Highmark Health is more than just “cyber security”, it’s about ensuring our patients and members are protected and can get the care they need without disruption. We are trusted SMEs with diverse points of view and skills synthesizing security solutions for our enterprise and customers. We are a highly engaged team who values professional development and growth – not just with formalized career development, but with weekly learning opportunities, speaking engagements and leadership involvement in professional organizations.  We believe inertia is our prime enemy and relentless incrementalism is our ultimate weapon. That’s why we are innovators, collaborators, solutioners, and tinkerers.  Our work is not easy and the challenges only get tougher; if that’s the kind of environment you’re seeking, then we want to talk to you.   

This job, as a technical expert in the security domain, sets and monitors role lifecycle management standards, best practices and systems necessary to ensure the protection of the confidentiality of informational assets, which requires strong technical knowledge of information systems, role based access controls (RBAC) and the use of established security control. 

ESSENTIAL RESPONSIBILITIES

• Provide Role Based Access Control (RBAC) analysis, design and implementation expertise within the Organization's IAM Infrastructure; collaborating with lean purposed IAM Software Development team to refine and expand the adoption of a semantically logical and comprehensive RBAC framework.
• Collaborate with Business Intelligence & Analytics groups; leveraging Tableau data visualization software for role-mining analysis, and dashboarding executive overview reporting.
• Collaborate with IT Governance, Risk & Compliance group to expand and improve process certification using industry standard product solutions (Sailpoint, OIG, Dell One).
• Document business requirements gathering and documentation for the design and implementation of an RBAC framework.
• Provide business analysis support, drafting business requirements documentation for clients, as well as system integrations and operational support for User Access review campaigns.
• Other duties as assigned or requested.