At The Trustmark Companies we help people thrive. We provide products and personalized attention that engage and inspire people to maximize their health potential. We offer employee benefits customized to fit each unique business need or life circumstance. It all revolves around our belief that better health and greater financial security increase overall well-being. And with well-being comes peace of mind. Peace of mind to focus on work and family and everything else that’s important in life. Peace of mind to thrive. 

Our IT team is looking for an Information Security Specialist.  The Information Security Specialist serves as the primary information security link between the assigned business unit(s) and enterprise Information Security Office. Responsible for supporting the business unit(s) with security related issues both from the technology as well as policy and standards implementation. Will address issues such as: system vulnerability testing, business continuity within the system, vendor management, and responding to external third party requests.

Key Accountabilities:

• Work with business unit(s) and across Enterprise IT to support information security needs of business to include:
  • Implementing and tracking the vendor information security management program for the business unit(s).
  • Ability to initiate, facilitate and promote cybersecurity within the organization and monitor adherence to security policies, standards and controls.
  • Coordinating/responding to information security related inquiries/requests from external stakeholders and third parties to include: request for proposals, audits, regulator requests, and others.
  • Coordinating work efforts across IT/OPS, EPMO, Enterprise Architecture, and others.
  • Lead and complete risk analysis for both onsite, written or verbal assessments, with the assistance of the business, ensuring consistent execution.
  • Must have current knowledge and stay up-to-date on the latest Security legislation, regulations, advisories, alerts and vulnerabilities
  • Coordinates testing for disaster recovery, business continuity, and operating systems security, and assists in the implementation company-wide guidelines.
  • Oversees the Business Continuity Plan (BCP) program and its effective operation.
  • Coordinates with System Owners, Technical Leads, and Business Reps to ensure the development, maintenance, and testing of their respective BCPs to meet readiness requirements for company continuity of operations.
  • High degree of initiative, dependability, and the ability to work with minimal supervision.Knowledge of system and network architecture and interrelationships (technical and functional).
    Knowledge of security methodologies, policies, standards and industry practices
  • Demonstrates the ability to analyze and resolve issues independently in a fast-paced environment.
  • Good organizational, multi-tasking, and time-management skills.
  • Assist with defining appropriate metrics to measure the quality of the security program
  • Knowledge of project management tasks, experience creating documentation/presentations, and demonstrated ability to train other team members.
  • Assist with driving the security awareness program.
  • Serve as central contact for questions/inquiries relating to information protection process.
  • Represent the Information Security organization on projects as needed.
  • Solid experience with and knowledge of Federal, HIPAA and other healthcare security regulations.
  • Ability to define, learn, understand, and apply new technologies, methods, and processes.
• Respond to information security related questions for external requests including:
  • RFPs
  • Regulator requests
  • Audit requirements
  • Identified Vulnerabilities including Remediation Planning
• Review vendor and client contracts to make sure we are able to comply with requirements.  Work closely with the PSO and Legal.
• Identifies information security risks and leverages the Information Security Management System to prioritize risks across the enterprise.
  Responsible for providing insight, input and assistance in developing and advancing the overall information security strategy across the enterprise including, but not limited to, security awareness. 

Requirements:

• Bachelor’s Degree in Computer Information Systems required.
• 3 or more years of experience in information security required.
• Problem solver facilitating answers to complex questions.
• Ability to interact with associates at all levels
• Self-directed, detail oriented and excellent task management and organizational skills
• Strong collaboration skills
• Influencing skills
• Strong written and verbal communications skills
• Education or Certifications related to information security, computer forensics or related areas.
• CISSP preferred
• Other certifications such as CBCP, CTPRP, CISA, HCISPP, CHC, CHPC, CHSP, and/or CISM are beneficial.