7,816 Security Risk Professionals jobs in the United States
Information Security Risk Manager
Posted today
Job Viewed
Job Description
Job Description
Job Title: Information Security Risk Manager
General Job Description
The Information Security Risk Manager has a highly collaborative role with primary responsibility for identifying risks across Argent’s information technology and information security programs and recommending appropriate and effective solutions that align with business goals. The Information Security Risk Manager will work with the Technology and Risk Teams to establish robust procedures for oversight and on-going monitoring of these risks. Relevant risk factors may include the risk of system failure or loss of data as well as reputational risk and regulatory compliance.
Essential Duties
- Perform comprehensive IT and security risk assessments, monitor vulnerabilities, and develop actionable risk metrics and dashboards.
- Execute security risk related projects/programs, such as updating security policies, standards and participating in security awareness programs.
- Monitor current and proposed laws, regulations, industry standards, and ethical requirements related to Information Security and Privacy
- Work with the Risk Committee to oversee a framework and methodology for completion of contingency plans by internal business units.
- Interface with Internal and External Auditors and Regulators
- Establish protocols for the reporting and escalation of any security, privacy, or identity theft incidents, as appropriate.
- Work closely with Information Technology, Compliance, Legal and other business units to integrate compliance requirements into technology/information security related projects and business processes
Qualifications
Knowledge and Skills:
- Familiarity with maximizing the use of Governance Risk and Compliance Automation Software
- Experience with technology risks and controls and deploying information governance, information technology risk management, compliance, information security, or privacy programs required
- Knowledge of information security risk management and IT controls frameworks and methodologies (e.g. NIST CSF, FFEIC)
- Familiar with project management best practices, including planning, execution, monitoring, and risk management to ensure successful project delivery.
- Exposure to and familiarity with relevant standards such as Gramm-Leach-Bliley Act (GLBA), Cybersecurity Supervision Work Program (CSW), Federal Financial Institutions Examination Council (FFIEC) Information Technology (IT) Handbooks, and applicable laws related to regulatory compliance, information security and privacy
- Familiar with Risk Management Principles (risk avoidance, transfer, mitigation, acceptance), and Risk Assessment process.
- Understanding of key technology concepts such as access control, confidential data, encryption, business continuity, and security monitoring tools
- A strong knowledge of IT organization business processes and systems including IT security, data management, architectural and planning, technology life cycle management, continuous audit, regulatory concerns and FFIEC examination materials
- Understanding of risk management functions, including technical standards (preferably CIS) and their implications
- Highly organized with ability to prioritize in a fast-paced environment
- Solid Problem-solving skills and ability to be highly productive, both working independently and as part of a team.
- Excellent organizational skills and attention to detail.
- Excellent written and verbal communication skills.
- Advanced computer skills and proficiency in Microsoft Office Suite or similar software.
Education/Experience:
- Bachelor’s degree
- Five to seven years of information technology security, risk management, audit and compliance experience preferred.
- Certified Information Systems Security Professional (CISSP), Certified Information Security Management (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC), preferred at least one of these certifications
Manager Information Security & Risk Management
Posted 1 day ago
Job Viewed
Job Description
Company: Highmark Health
Job Summary: This job provides Information Security and Risk Management services for the organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security and Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
Essential Responsibilities:
- Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
- Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
- Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
- Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
- Ensure compliance to Corporate and Information Security policies, standards and procedures.
- Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
- Other duties as assigned or requested.
Education:
- Required: Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field.
- Substitutions: 6 years of relevant experience substitution for a Bachelor's Degree.
- Preferred: Master's Degree in Computer Science, Information Security or related field.
Experience:
- Required: 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology.
- Required: 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences.
- Required: 1 - 3 years in mentoring others in a leadership role.
- Required: 1 - 3 years in Staff Management.
- Required: 1 - 3 years in developing and executing strategic plans to realize business objectives.
- Preferred: 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology.
- Preferred: Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework.
- Preferred: Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits.
- Preferred: Experience establishing budgets and meeting fiduciary goals.
- Preferred: Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.).
Licenses and Certifications:
- Required: None.
- Preferred: Certified Information Systems Security Professional (CISSP) OR Certified Information Security Manager (CISM) OR Certified in Risk and Information Systems Controls (CRISC) OR Information Technology Infrastructure Library (ITIL).
Skills:
- Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140.
- Strong teamwork and interpersonal skills.
- Experience in leading process improvement initiatives.
- Ability to motivate high performance, multi-discipline teams.
- Demonstrated competency in project execution.
- Demonstrated abilities in relationship management.
Languages (Other than English): None.
Travel Requirement: 0% - 25%.
Physical, Mental Demands and Working Conditions:
- Position Type: Office-Based Teaches/Trains others regularly Frequently Travels regularly from the office to various work sites or from site-to-site Occasionally Works primarily out-of-the office selling products/services (Sales employees) Does Not Apply Physical Work Site Required Yes Lifting: up to 10 pounds Does Not Apply Lifting: 10 to 25 pounds Does Not Apply Lifting: 25 to 50 pounds Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
Pay Range Minimum: $108,000.00 Pay Range Maximum: $201,800.00
Manager, Information Security Risk Management
Posted 2 days ago
Job Viewed
Job Description
Hearst Technology, Inc, Information Security Office seeks a Manager, Information Security Risk Management. The Manager, Information Security Risk Management is responsible for assessing risk and managing risk information for the organization and key business units. This position assesses information security risk within essential technology functions, key business processes, documentation, and collaborates with key business leaders to assist in reducing risk and maturing the overall control environment. This position will also support Audit and Compliance functions within Hearst, focusing on PCI and HIPAA.
Team Alignment: Governance, Risk, and Compliance (GRC) Team. The GRC Team is multi-faceted and focuses on driving business value. Our mission is to establish an integrated program that ensures the overall effectiveness of capabilities that impact information security across business units globally.
- Perform security risk reviews, risk assessments and gap assessments on key business processes and new and existing technologies. Subsequently, work with various business units, as needed, to ensure controls are adequate, appropriate, and effective and that mitigation and remediation plans are in place.
- Maintain the IT risk register and risk dashboard keeping risks, and their response plans up to date; will be required to work with cross-functional teams and businesses.
- Prepare detailed recurring risk management reports with associated metrics.
- Support the implementation of a risk program including enhancing processes supporting accountability, exception requests, and overall risk reduction in accordance with NIST and COBIT Cybersecurity frameworks.
- Support vendor due-diligence process and help define overall third-party risk management efforts.
- Support risk-focused governance entities such as forums and steering committees.
- Support internal and external audit processes for relevant compliance areas including NIST CSF, NIST 800-53, PCI-DSS, HIPAA, SOX, and other external and internal requirements.
- Support key capabilities and processes across the GRC function in support of the Hearst Information Security Office using an Agile methodology approach to delivering work products and key services.
- Work collaboratively with regional and global partners in other functional units; ability to navigate a complex organization; to influence and lead people across cultures at a senior level. Collaboratively interface with global IT and business partners to provide guidance and support.
- Design and implement improvements in risk-related documentation.
- Other related duties as assigned.
Who You Are: As a mid-level position, comfort and experience with all aspects of governance, risk, and compliance is required.
Technical Skills
- Experience with IT governance, risk, and compliance management in a large global environment, while working with geographically dispersed, multidisciplinary teams.
- Experience conducting risk assessments and managing risk across departments and functions.
- Strong foundation in PCI and HIPAA compliance requirements and testing.
- Familiarity with an integrated risk management platform.
- Familiarity with security frameworks, particularly NIST and COBIT Cybersecurity Frameworks and HITRUST.
- Basic understanding and knowledge of technical fundamentals such as networking concepts, cloud computing, application development, and security best practices.
- Proficiency with Word, Excel, PowerPoint, JIRA, SharePoint.
- Experience with GRC and risk management platforms such as Prevalent and TruOps is desired.
Soft Skills
- Strong work ethic with attention to detail and demonstrated analytical abilities.
- Attention to detail, verbal and written communication, and initiative; able to apply constructive feedback to enhance managing risk.
- Strong presentation skills with the ability to articulate complex problems and solutions through concise and clear messaging.
- Self-motivated with excellent planning and organizational skills; and the ability to prioritize tasks to meet deadlines and effectively manage changing priorities.
- Professional customer orientation with a strong commitment to providing a high standard of customer satisfaction.
- Ability to deliver client-ready documentation and participate in relevant client meetings; able to work across teams effectively and efficiently.
- Working understanding of project management principles, processes, and documentation.
- Ability to collaborate with internal and external stakeholders.
Qualifications
- Bachelor's Degree in Information Technology, Computer Science, or equivalent.
- Minimum 5 years of relevant experience in a risk management role with at least 2 years of practical experience in Audit and Compliance.
- Industry standard certification such as CISA, CRISC, CISM, ARM, CISSP, ISO 27001, ISO 27005 is desired.
In accordance with applicable law, Hearst is required to include a reasonable estimate of the compensation for this role if hired in New York City. The reasonable estimate, if hired in New York City, is $135,000 - $150,000. Please note this information is specific to those hired in New York City. If this role is open to candidates outside of New York City, the salary range would be aligned to that specific location. A final decision on the successful candidate's starting salary will be based on a number of permissible, non-discriminatory factors, including but not limited to skills and experience, training, certifications, and education. Hearst provides a competitive benefits package, including medical, dental, vision, disability and life insurance, 401(k), paid holidays and paid time off, employee assistance programs, and more.
Manager Information Security & Risk Management
Posted 4 days ago
Job Viewed
Job Description
Company: Highmark Health
Job Summary: This job provides Information Security and Risk Management services for the organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security and Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
Essential ResponsibilitiesPerform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
Ensure compliance to Corporate and Information Security policies, standards and procedures.
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
Other duties as assigned or requested.
EducationRequired: Bachelors Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions: 6 years of relevant experience substitution for a Bachelors Degree
Preferred: Masters Degree in Computer Science, Information Security or related field
ExperienceRequired: 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
1 - 3 years in mentoring others in a leadership role
1 - 3 years in Staff Management
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred: 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
Experience establishing budgets and meeting fiduciary goals
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
Licenses And CertificationsRequired: None
Preferred: Certified Information Systems Security Professional (CISSP) OR Certified Information Security Manager (CISM) OR Certified in Risk and Information Systems Controls (CRISC) OR Information Technology Infrastructure Library (ITIL)
SkillsKnowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
Strong teamwork and interpersonal skills
Experience in leading process improvement initiatives
Ability to motivate high performance, multi-discipline teams
Demonstrated competency in project execution
Demonstrated abilities in relationship management
Languages (Other than English)None
Travel Requirement0% - 25%
Physical, Mental Demands and Working ConditionsPosition Type: Office-Based
Teaches/Trains others regularly
Frequently Travels regularly from the office to various work sites or from site-to-site
Occasionally Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply Physical Work Site Required
Does Not Apply Lifting: up to 10 pounds
Does Not Apply Lifting: 10 to 25 pounds
Does Not Apply Lifting: 25 to 50 pounds
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Companys Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employees responsibility to comply with the companys Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum: $108,000.00
Pay Range Maximum: $201,800.00
Base pay is determined by a variety of factors including a candidates qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law. We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below. For accommodation requests, please contact HR Services Online at
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Be The First To Know
About the latest Security risk professionals Jobs in United States !
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Manager Information Security & Risk Management
Posted 12 days ago
Job Viewed
Job Description
Company :
Highmark Health
Job Description :
JOB SUMMARY
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
ESSENTIAL RESPONSIBILITIES
-
Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
-
Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
-
Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
-
Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
-
Ensure compliance to Corporate and Information Security policies, standards and procedures.
-
Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
-
Other duties as assigned or requested.
EDUCATION
Required
- Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
Substitutions
- 6 years of relevant experience substitution for a Bachelor's Degree
Preferred
- Master's Degree in Computer Science, Information Security or related field
EXPERIENCE
Required
-
7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
-
7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
-
1 - 3 years in mentoring others in a leadership role
-
1 - 3 years in Staff Management
-
1 - 3 years in developing and executing strategic plans to realize business objectives
Preferred
-
10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
-
Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
-
Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
-
Experience establishing budgets and meeting fiduciary goals
-
Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
LICENSES AND CERTIFICATIONS
Required
- None
Preferred
-
Certified Information Systems Security Professional (CISSP) OR
-
Certified Information Security Manager (CISM) OR
-
Certified in Risk and Information Systems Controls (CRISC) OR
-
Information Technology Infrastructure Library (ITIL)
SKILLS
-
Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
-
Strong teamwork and interpersonal skills
-
Experience in leading process improvement initiatives
-
Ability to motivate high performance, multi-discipline teams
-
Demonstrated competency in project execution
-
Demonstrated abilities in relationship management
Languages (Other than English)
None
Travel Requirement
0% - 25%
PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS
Position Type
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$108,000.00
Pay Range Maximum:
$201,800.00
Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J