Manager, Information Security Risk and Consulting

🕒 vor 13 Tagen

🚗 Michigan – Remote

🚗 Michigan – Remote

⏰ Vollzeit

🟠 Senior

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Trinity Health

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

🏥 Gesundheitswesen

📚 Bildung

🤝 Non-Profit

Healthcare • Education • Non-profit

Trinity Health ist eines der größten gemeinnützigen katholischen Gesundheitssysteme in den USA. Es ist eine Gemeinschaft von 123.000 Kollegen und fast 27.000 Ärzten und Klinikern, die sich in 26 Bundesstaaten um vielfältige Gemeinschaften kümmern. National anerkannt für Pflege und Erfahrung umfasst das Trinity Health-System 88 Krankenhäuser, 135 Pflegeeinrichtungen, das zweitgrößte PACE-Programm des Landes, 136 Notfallzentren und viele weitere Gesundheits- und Wohlfühldienste. Mit Sitz in Livonia, Michigan, beläuft sich der jährliche Betriebsumsatz auf 21,5 Milliarden US-Dollar, von denen 1,4 Milliarden US-Dollar in Form von Wohlfahrtspflege und anderen gemeinnützigen Programmen an die Gemeinschaften zurückgegeben werden.

Beschreibung

• The Manager, Information Security Risk and Consulting plays a critical role in executing and maturing the organization’s third-party and integrated risk management program. • Oversight of enterprise risk assessments across commercial off-the-shelf (COTS), open source, and internally developed applications, as well as associated system integrations. • Identify, assess, and prioritize security risks, ensuring appropriate controls are implemented. • Drive continuous monitoring and risk-informed decision-making across the organization. • Lead the development and reporting of key risk indicators (KRIs) and key performance indicators (KPIs). • Oversee the design and execution of scalable risk management processes, leveraging GRC tools and automation to enhance efficiency and consistency. • Build, develop, and lead a highly engaged, high-performing team of security risk professionals. • Foster a culture of accountability, collaboration, and continuous improvement within a complex and evolving security environment. • Develop and lead Trinity Health’s Information Security Third Party Risk and Integrated Risk Management Program.

🎯 Anforderungen

• Bachelor’s degree in Information Security or an equivalent combination of education and experience. • One or more security certifications: Certified Information Systems Security Professional (CISSP), International Social Security Association (ISSA), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) Certified in Governance, Risk and Compliance (GRCP) or equivalent. • Minimum of seven (7) years of progressive experience in information services including three (3) years working in cybersecurity governance, risk, and compliance (GRC). • Minimum of three (3) years of management experience with demonstrated leadership effectiveness and emotional intelligence. • Proven ability to lead, develop, and retain high-performing, highly engaged teams in complex security environments, including managing diverse talent and implementing tailored development strategies to drive individual and team success. • Minimum of three (3) years of progressively responsible experience in healthcare and/or other regulated industries. • Strong knowledge of the HIPAA Security Rule and applicable industry security regulations, with the ability to rapidly build and sustain expertise; working understanding of broader HIPAA requirements, including Privacy and Breach Notification Rules. • Proven knowledge of enterprise security principles and practices, with hands-on experience or demonstrated capability in implementing, integrating, and managing security solutions across enterprise environments. • Working knowledge of one or more information security regulations and/or frameworks - HIPAA, ISO 27001/2, FISMA, FIPS, HITRUST and NIST security. • Experience with GRC platforms (e.g., ServiceNow GRC, RSA Archer, OneTrust, or similar) supporting risk and compliance programs. • Demonstrated ability to leverage tooling to improve process efficiency, enable reporting, and support scalable risk management practices.

🏖️ Vorteile

• Health insurance • Professional development opportunities