Cyber Risk Program Manager — Healthcare Security & Compliance

Valley Health; Winchester (VA); On-site; USD 65,000 - 102,000; Full time

Benefits offered by this job

Zero-Deductible Health Plan

Dental and vision insurance

Generous Paid Time Off

Tuition Assistance

Retirement Savings Match

Employee Assistance Program

Healthy U Wellness Program

Job summary

Valley Health is hiring a Cyber Risk Program Manager to strengthen information security across the organization. The role involves identifying risk, leading vulnerability management, and ensuring compliance with HIPAA, NIST, and related regulations.

Onsite work is required 2-3 days weekly at Winchester Medical Center campus. You will collaborate with IT and business teams to apply risk-based controls and prepare audit documentation, while serving as backup to the Information Security Manager

Qualifications

• 7+ years of experience in information technology.
• 5+ years of work experience in cybersecurity, risk management, IT audit or regulatory compliance and information security management frameworks (e.g., HIPAA Security Regulations, HITECH, ISO 27000, COBIT, NIST RMF).
• Industry advanced level cybersecurity certification required within 1 year of hire.
• Working knowledge of hospitals and healthcare industry.

Responsibilities

• Monitors security posture and provides risk-based recommendations.
• Leads the vulnerability management program across apps, OS, networks and cloud.
• Collaborates with teams to remediate vulnerabilities and protect assets and data.
• Oversees IT audit processes and ensures HIPAA and NIST compliance.

Skills

Security leadership

Risk assessment

Communication

Regulatory knowledge

Education

Bachelor’s or postgraduate Degree in Business, Computer Science, Information Security or a related field

Tools

GRC tools

Policy management

Security metrics

Automation tools

Job description

Valley Health is hiring a Cyber Risk Program Manager to strengthen information security across the organization. The role involves identifying risk, leading vulnerability management, and ensuring compliance with HIPAA, NIST, and related regulations.

Onsite work is required 2-3 days weekly at Winchester Medical Center campus. You will collaborate with IT and business teams to apply risk-based controls and prepare audit documentation, while serving as backup to the Information Security Manager