Change Healthcare Information Security Analyst - Application Security in Nashville, Tennessee
TitleInformation Security Analyst - Application SecurityOverview of PositionThe Information Security Analyst is responsible for managing day to day application security functions including onboarding of Development teams to Application Security processes, assisting in automation projects, and plays a key role in the maturation of a global Application Security program. What will be my duties and responsibilities in this job?
Execution of dynamic and manual application security assessments
Implementation and support of vulnerability detection capabilities into corporate development SDLC processes in public cloud and on-premise environments. As a shared service organization, creating and implementing repeatable processes that are consumable by internal clients with varying degrees of capability and maturity is critical.
Provide consultation on best practices to internal customers to ensure processes are embedded at the correct time and frequency and to ensure compliance to security standards
Assist in automation of key processes including static and dynamic assessment workflows into the SDLC including opening of vulnerability tickets into bug tracking systems
Participate in evaluation of new technologies and trends in the application security space to ensure Change is leveraging best practices and the best toolsets in the industry
Serves as technical SME for the application security team for internal and external audiences where appropriate
What are the requirements needed for this position?
5+ years in information technology
3+ years in secure application development or application security role
Automation experience (scripting, leveraging APIs, etc.)
Ability to communicate and work well with both highly technical and non-technical team members
What other skills/experience would be helpful to have?
Experience with development platforms, languages, and scripting including Python, .NET, Java, C++, Perl, etc.
A pragmatic outlook that understands security problems as a balance of security and business requirements
Ability to manage multiple complex projects across a global business
Application Development background preferred
Understanding of key InfoSec regulation & frameworks (PCI, GLBA, HIPAA, ISO 27001, HITRUST, EHNAC) is a plus.
Infosec Certification preferred (CISSP, GPEN, GWAPT, CEH etc.)
Join our team today where we are creating a better coordinated, increasingly collaborative, and more efficient healthcare system!
Equal Opportunity/Affirmative Action Statement
Change Healthcare is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, genetic information, national origin, disability, or veteran status. To read more about employment discrimination protections under federal law, read EEO is the Law at https://www.eeoc.gov/employers/eeo-law-poster and the supplemental information at https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf.
If you need a reasonable accommodation to assist with your application for employment, please contact us by sending an email to firstname.lastname@example.org with "Applicant requesting reasonable accommodation" as the subject. Resumes or CVs submitted to this email box will not be accepted.
Click here https://www.dol.gov/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf to view our pay transparency nondiscrimination policy.
California (US) Residents: By submitting an application to Change Healthcare for consideration of any employment opportunity, you acknowledge that you have read and understood Change Healthcare’s Privacy Notice to California Job Applicants Regarding the Collection of Personal Information (https://www.changehealthcare.com/privacy-notice/privacy-notice-to-california-job-applicants) .
Change Healthcare maintains a drug free workplace and conducts pre-employment drug-testing, where applicable, in accordance with federal, state and local laws.
Change Healthcare is an equal opportunity employer. All qualified applicant will reveive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, genetic information, national origin, disability, or veteran status.
- Change Healthcare Jobs