Oct 24, 2022

Information Security Strategic Specialist

  • St. Luke's University Health Network
  • Allentown, PA, United States

Job Description

St. Luke's is proud of the skills, experience and compassion of its employees. The employees of St. Luke's are our most valuable asset! Individually and together, our employees are dedicated to satisfying the mission of our organization which is an unwavering commitment to excellence as we care for the sick and injured; educate physicians, nurses and other health care providers; and improve access to care in the communities we serve, regardless of a patient's ability to pay for health care.

The Information Security Strategic Specialist will lead efforts to advance security measures, analyze security solutions, meet with business analysts and other clinical IT team members to obtain buy-in, work with various IT teams to accomplish security objectives, take on special assignments requiring in-depth understanding of security technologies and solutions, and be responsible to IS management on goals, and objectives.


  • Works directly with Information Security officer on strategic advancement of Information Security 

  • Develops strategic and tactical road maps to ensure the Information Security strategic vision is met through each fiscal year. 

  • Directly engages with Information Security Officer on development and requirement gathering for security solutions 

  • Required to stay in touch with Information Security advancements and present recommendations for strategic changes to the Information Security officer 

  • Provides IS security solutions to vulnerabilities and works with the team to mitigate them 

  • Leads efforts to advance security goals and objectives across IT departments. 

  • Lead strategic efforts as determined by IS Management that require solutions to complex problems requiring in-depth focus and effort. 

  • Participates in IS team meetings and provides input to help determine the best way to implement new solutions and safeguards. 

  • Serves as a key-player in communicating security goals and objectives and the importance therein with the business and other IT teams. 

  • Functions as a team-lead that demonstrates strong leadership skills as a voice of IT security along with IS Operations to help proliferate and advance the efforts to improve St. Luke’s IS security posture. 

  • Maintains an understanding of licenses, license allocation and when licenses are up for renewal. 

  • Accountable to maintain constant understanding of the Identity and Access Management team and how it impacts Information Security, technology, business practices, and overall network stability. 

  • Develops new, and changes outdated processes, in order to improve the business outcomes without introducing new security risks. 

  • Solves long-standing inefficiencies within IT at a strategic level that maximize security efforts while streamlining business processes. 

  • Install, Operate and Maintain security responsibilities, including firewalls, proxy systems, logging, and other security devices and appliances. 

  • Provide security expertise and security infrastructure expertise to the company. 

  • Facilitate new electronic data interchanges between other Healthcare firms. Assist in the enforcement and monitoring of Compliance regulations. 

  • Defines security requirements, based on the overall security strategy and reviews and implements systems to comply with established security standards. 


Sitting for up to 7 hours per day, 3-4 hours at a time; standing for up to 1 hours per day, 1 hours at a time; walking for up to 1 hours a day.  Seeing as it relates to general, near, color, and peripheral vision.  Hearing as it relates to normal and telephone conversations.


Bachelor of Science - Information Systems or Information Security required.


  • 8 years minimum Information Technology experience

  • 5-7 Years in Information Security as an Engineer or Sr. Analyst

  • 5-7 years managing multiple Information security applications and systems

  • 4-6 years of experience in an Information Security operational environment

  • 3-5 years of experience in exact data matching and data loss prevention implementation

  • 3-5 years project management or project lead experience

  • 3-5 years implementing networking technologies

  • 1-2 years of Information Security architectural design and implementation

  • Strong knowledge of HIPAA, HITECH, HITRUST, PCI, NIST, and ISO.

  • Experience working for a CE in HealthCare.

  • Expert knowledge of TCP/IP, common protocols and standards.

  • Expert knowledge of Checkpoint and/or CISCO enterprise firewall technologies required.

  • Experience with DLP, EDM and IPS/IDS systems.

  • Experience with Microsoft Security Solutions

  • Experience with Microsoft Cloud Solutions

Information Security Certifications

  • Microsoft Security Certified – MS500- must obtain within one year of hire

  • CompTIA Security – Required

  • Certified Ethical Hacking – Preferred

  • Certified Information Systems Auditor – Preferred

  • Certified Information System Security Professional

Please complete your application using your full legal name and current home address.  Be sure to include employment history for the past seven (7) years, including your present employer.  Additionally, you are encouraged to upload a current resume, including all work history, education, and/or certifications and licenses, if applicable.  It is highly recommended that you create a profile at the conclusion of submitting your first application.  Thank you for your interest in St. Luke's!!

St. Luke's University Health Network is an Equal Opportunity Employer.

Apply Now