Description

Who We Are: MedOne is a full-service pharmacy benefit manager (PBM) serving clients and members nationwide. Our fully transparent pass-through model ensures people have convenient access to the most appropriate prescriptions at the most affordable prices.

What You'll Do: The Network Information Security Administrator at MedOne will play a critical role in safeguarding our infrastructure and ensuring compliance with industry standards. This role will focus on two primary objectives: securing MedOne’s infrastructure based on industry best practices and ensuring the successful completion of all necessary industry audits, including SOC 2 Type 2.

Key Objectives

Infrastructure Security: Protect MedOne’s infrastructure and sensitive data from internal and external threats by designing and implementing robust security defenses.
Audit Compliance: Ensure MedOne successfully passes SOC 1 Type 2, SOC 2 Type 2, and other necessary industry audits through active collaboration and rigorous testing.

Responsibilities

Data Protection: Design and implement comprehensive defenses to guard sensitive company data from potential threats.
Monitoring & Incident Response: Lead day-to-day monitoring for unusual activities, implement defensive protocols, and report security incidents promptly.
Collaboration: Work closely with the IT team to develop new security protocols and proactive defense systems.
Documentation: Maintain detailed documentation of security guidelines, procedures, standards, and controls.
Cybercrime Awareness: Stay informed about the latest cybercrime tactics to ensure MedOne remains ahead of emerging threats.
Infrastructure Design: Ensure the network infrastructure design follows industry best practices.
Audit Preparation: Collaborate with internal teams and external vendors to ensure audit readiness and success.
Risk Analysis: Collect data on current security measures, conduct risk analysis, and prepare regular systems status reports.
Disaster Recovery: Develop, maintain, and test disaster recovery protocols.
Vulnerability Testing: Conduct regular security testing, identify vulnerabilities, and update protocols accordingly.
Compliance Maintenance: Develop and maintain policies and procedures to meet compliance certification requirements.
Employee Training: Lead training initiatives to educate employees on preventing phishing and other cyberattacks.
Process Improvement: Identify and address inefficiencies in current processes and recommend improvements.

Required Skills And Qualifications

3-5 years of experience in cybersecurity within a midsize or large company, ideally in the healthcare or PBM industry.
Extensive knowledge of IT, including hardware, software, and networks.
Strong attention to detail and ability to multitask in a fast-paced environment.
Excellent problem-solving, critical thinking, and forensic analysis skills.
Strong verbal and written communication abilities.

Preferred Skills And Qualifications

Bachelor’s degree in Information Systems, Information Technology, or a related field.
Ability to work effectively both independently and as part of a team.
A hacker mindset to anticipate and counteract threats.
Relevant certifications such as CCNP, CCNA, CISSP, and CISA.
Experience with compliance controls like PCI, HIPAA, SOC 1, SOC 2, and HITRUST.

Why Join MedOne?

Competitive salary and bonuses that reward your performance.

Comprehensive health, dental, and vision insurance.

401(k) with company match to secure your future.

Generous paid time off and holidays.

Opportunities for professional growth and development.

A vibrant and collaborative work culture.

Location: We have offices in either Dubuque, IA or Kansas City, MO, or the position can be remote within the United States

Employment Type: Full-Time, Salary/Exempt Position

MedOne is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Offers are contingent on passing a background check and drug screen.

MedOne Pharmacy Benefit Solutions

New Jobs

Network Information Security Administrator