Information Security Engineer

LCS is seeking an Information Security Engineer to support the day-to-day security operations that protect customer and business applications. In this onsite role in Des Moines, IA, you will oversee user access and identity management and partner across teams to research, plan, and execute security measures that reduce cyber-attack risk. The position reports to the VP, Information Technology.

What you’ll do

• Administer and manage IT security technologies, including Microsoft Entra, Okta identity management, vulnerability management, spam email technology, simulated phishing technology, and generative AI solutions.
• Manage the full user access lifecycle for corporate associates, community associates, contractors, consultants, and third-party vendors, including provisioning, modifications, transfers, and terminations.
• Ensure access to business and clinical applications is assigned according to job responsibilities, least-privilege principles, and established security standards.
• Run periodic user access reviews and certification campaigns for critical senior living systems, including financial, resident management, healthcare, and human resources applications.
• Monitor security alerts, suspicious activity, and system-generated events to identify potential threats affecting LCS communities, corporate operations, or resident information.
• Administer and support enterprise security solutions such as endpoint protection, email security, vulnerability management, identity protection, device management, and security monitoring platforms.
• Collaborate with Infrastructure and Application teams to remediate vulnerabilities, implement security hardening recommendations, and maintain secure system configurations.
• Participate in investigations involving suspected incidents, unauthorized access attempts, phishing attacks, malware infections, or policy violations.
• Perform security risk assessments for new technologies, business initiatives, acquisitions, community transitions, and third-party vendor solutions.
• Support due diligence and integration activities tied to community acquisitions, management changes, and new community openings.
• Develop and maintain information security policies, standards, procedures, and access governance practices.
• Assist with business continuity and disaster recovery planning to support uninterrupted operations across LCS-managed communities.
• Support internal audits, external audits, and regulatory assessments by documenting controls, collecting evidence, and responding to audit requests.
• Educate associates and business partners on cybersecurity risks, security policies, and best practices to protect resident and organizational information.
• Research emerging cybersecurity threats and recommend improvements to strengthen security controls across the organization.
• Maintain documentation for security systems, access management processes, operational procedures, and technical standards.
• Perform other duties and responsibilities as assigned.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent year of experience
• 6+ years related experience
• In-depth knowledge of security best practices, data protection, and regulatory compliance
• Excellent problem-solving skills and the ability to troubleshoot complex issues
• Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders

Preferred qualifications

• Relevant industry certifications such as CISSP, CISM, CompTIA Security+, or vendor-specific identity certifications

Technologies

• Microsoft Entra
• Okta identity management
• Vulnerability management
• Spam email technology
• Simulated phishing technology
• Generative AI solutions
• Endpoint protection
• Email security
• Identity protection
• Device management
• Security monitoring platforms

Travel and compensation

• Travel frequency: 0-10%
• Estimated salary: USD 98,000 - 122,000 per year

Benefits

• Competitive pay
• Great benefits and vacation time
• Medical
• Dental
• Life insurance
• Disability
• 401(K) with company match
• Paid parental leave