Job Description

GRC Information Security Analyst (HIPAA, Hospital) The Information Security Analyst (GRC) monitors, evaluates, and reports on information security related events as they pertain to network security, host-based security, application security, and other forms of technical security capabilities in order to assess system and enterprise level risk at the Hospital & Health Center. The primary responsibility of this job is to reduce the exposure of threats to confidentiality, integrity, and availability of both critical and supporting computing systems. Job duties include: Maintain the IT Risk Register. Create and maintain information security policies and procedures in alignment with state and federal (HIPAA) privacy regulations and other relevant standards. Facilitate external audits and coordinate required components between all parties. Manage the GRC program and review security controls in compliance with security frameworks. Maintain the security awareness training program. Partner with Compliance and the Internal Audit Program to ensure reporting and accountability of management responses. Assist the corporate compliance department in privacy assessments, as needed. Conduct, review, and advise on Third Party Risk Assessments for vendors. Conduct, review, and advise on risks to availability, confidentiality, and integrity of the hospital's processes, assets, etc. Conduct other audits and assessments as needed to monitor risk points in the hospital's IT domains. Assist in security incident investigations and documentation of incidents including after-action reports and recommendations. Create, maintain, and audit data flows/diagrams for the organization. Minimum Qualifications: Education: Bachelor's Degree (Minimum) Master's Degree (Preferred) Experience: 4 Years of Experience (Minimum) 6 Years of Experience (Preferred) Seniority level: Mid-Senior level Employment type: Contract Job function: Information Technology Industries: Hospitals and Health Care #J-18808-Ljbffr Prosum

Job Tags

Similar Jobs