Information Security Manager

Reports to: Director, Health Information management, Chief Information Officer, or Senior Executive

General Purpose: The Information Security manager serves as the process owner for all ongoing activities that serve to provide appropriate access to and protect the confidentiality and integrity of patient, provider, employee, and business information in compliance with organization policies and standards.

Position Responsibilities:

• Serves as an internal information security consultant to the organization

• Documents security policies and procedures created by the Information Security Committee/Council

• Provides direct training and oversight to all employees, contractors, alliances, or other third parties, ensuring proper information security clearance in accordance with established organizational information security policies and procedures

• Initiates, facilitates, and promotes activities to create information security awareness within the organization

• Perform information security risk assessments and serves as an internal auditor for security issues

• Serves as the security liaison for clinical, administrative, and behavioral systems as they integrate with their data users

• Implements information security policies and procedures for the organization

• Reviews all system-related security plans throughout the organization's network, acting as a liaison to Information Systems

• Monitors compliance with information security policies and procedures, referring problems to the appropriate department manager

• Coordinates the activities of the Information Security Committee

• Advises the organization with current information about information security technologies and related regulatory issues

• Monitors the internal control systems to ensure that appropriate access levels are maintained

• Prepares the disaster recovery plan

 Qualifications:

• Baccalaureate degree in Health Information Administration or related field

• Certification as an RRA or an ART

• Experience in project management

• Knowledgeable on security access technologies

If anyone would like to contribute another sample job description, please contact me at my_last_name@informatics-review.com

© 2001 The Informatics Review

dfs 10 Sept 2001