IT Administration Services & Cybersecurity Specialist

Job Description

Job DescriptionBenefits:

• 401(k)
• Bonus based on performance
• Dental insurance
• Health insurance
• Paid time off

Job Summary
Peace Healthcare Services is seeking an experienced IT Administration Services & Cybersecurity Specialist to oversee the organization’s information technology operations, cybersecurity, compliance, and technology-related risk management.
This position will provide independent IT and cybersecurity oversight, with a particular focus on protecting sensitive healthcare information, maintaining HIPAA compliance, supporting BHA and CARF re-accreditation requirements, monitoring IT controls, and identifying and correcting technology and compliance deficiencies.
The successful candidate will work collaboratively with leadership and staff while maintaining appropriate independence between IT/security functions and Finance.
Key Responsibilities

• Manage day-to-day IT administration, including systems, accounts, devices, applications, and user access.
• Establish and maintain appropriate user-access controls, permissions, and account-management procedures.
• Develop, implement, and monitor cybersecurity policies, procedures, and security practices.
• Identify cybersecurity risks and vulnerabilities and recommend appropriate corrective actions.
• Support cybersecurity incident identification, response, documentation, and follow-up.
• Maintain safeguards to protect Protected Health Information (PHI) and other confidential organizational information.
• Monitor and support compliance with HIPAA and applicable privacy and security requirements.
• Conduct or coordinate IT compliance monitoring, internal reviews, and security audits.
• Identify IT, cybersecurity, and compliance deficiencies and assist leadership with developing corrective action plans.
• Maintain appropriate IT documentation, security procedures, reports, and records.
• Support BHA and CARF re-accreditation preparation, including technology-related documentation, evidence, policies, and corrective actions.
• Assist with preparation for internal and external compliance reviews and audits.
• Monitor technology vendors and third-party IT services to ensure appropriate security and compliance standards are maintained.
• Support Microsoft 365, EHR, network, endpoint, and other organizational technology systems.
• Develop and maintain business continuity, backup, and disaster recovery procedures.
• Assist with testing and updating disaster recovery and business continuity plans.
• Provide cybersecurity and technology training and education to employees.
• Promote staff awareness of phishing, password security, access controls, confidentiality, and other cybersecurity practices.
• Provide regular reports to leadership regarding IT operations, cybersecurity risks, compliance concerns, and recommended improvements.
• Maintain appropriate separation and independent oversight of IT/security functions from Finance.
• Perform other IT, cybersecurity, and compliance-related duties as assigned.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field or equivalent combination of education and relevant experience.
• Demonstrated experience in IT administration and/or cybersecurity.
• Knowledge of cybersecurity principles, access controls, risk management, and incident response.
• Knowledge of HIPAA privacy and security requirements and protection of PHI.
• Experience with IT compliance monitoring, auditing, and corrective action processes.
• Ability to manage user accounts, permissions, systems, and technology resources.
• Strong documentation, analytical, problem-solving, and communication skills.
• Ability to maintain confidentiality and handle sensitive healthcare and employee information.
• Ability to work independently while collaborating effectively with organizational leadership and staff.

Preferred Qualifications

• Experience working in a healthcare, behavioral health, or other regulated environment.
• Knowledge of CARF accreditation and re-accreditation requirements.
• Experience conducting HIPAA security risk assessments.
• Experience with Microsoft 365 administration and security.
• Experience working with electronic health records (EHR) and healthcare technology systems.
• Experience supporting healthcare compliance audits.
• Relevant cybersecurity or IT certifications such as CompTIA Security+, CISSP, CISA, or CISM.
• Experience developing or maintaining business continuity and disaster recovery plans.