Cyber Security Manager (GRC)

Children's Health; Carrollton (TX); Remote; USD 100,000 - 150,000; Full time

Job summary

Children's Health is seeking a Manager of Governance, Risk, and Compliance to lead cybersecurity programs in a healthcare setting. This role focuses on ensuring regulatory compliance, managing risks, and developing security policies. The ideal candidate will have significant experience in cybersecurity and a strong grasp of compliance frameworks.

Benefits

Medical premiums covered after 3 years

Employee savings plan with 4%-10% match based on tenure

Paid parental leave (up to 12 weeks)

Caregiver leave

Adoption and surrogacy reimbursement

Qualifications

• Minimum 5 years in a senior cybersecurity role.
• Management experience in cybersecurity or IT preferred.
• ISC2 CISSP certification preferred.

Responsibilities

• Manage various cybersecurity functions.
• Ensure compliance with HIPAA, NIST, HITRUST, and related frameworks.
• Develop policies and guidelines for cybersecurity.

Skills

Risk Management

Compliance

Cybersecurity Management

Communication

Incident Response

Education

Bachelor’s degree

Tools

HIPAA

NIST

HITRUST

ISC2 CISSP certification

Job description

Job Title & Specialty Area: Manager, Cyber Security - Governance, Risk, and Compliance (Healthcare)

Department: IT Security

Location: Dallas, TX

Shift: Monday - Friday

Job Type: Remote

Why Children’s Health?

At Children's Health, our mission is to Make Life Better for Children. We recognize that children's health is crucial to achieving this goal.

Through cutting-edge treatments and our affiliation with UT Southwestern, we aim to deliver an extraordinary patient and family experience, ensuring every moment contributes to their well-being.

Our commitment extends beyond our organization to the broader community. Together, we can make a difference in children's lives and contribute to a healthier future for all.

Summary

We are seeking a highly skilled Manager of Governance, Risk, and Compliance (GRC) to lead our GRC programs within a complex, highly regulated healthcare environment. This role ensures compliance with healthcare laws, regulations, and standards, while proactively managing risks to protect patient data, operational integrity, and our reputation. The ideal candidate will have a solid understanding of healthcare compliance frameworks, risk management, and the ability to convert regulatory requirements into strategic actions.

Responsibilities

• Manage various cybersecurity functions.
• Evaluate cybersecurity performance and recommend improvements.
• Develop policies and guidelines for organizational consideration.
• Monitor the effectiveness of security controls.
• Manage security controls aligned with national standards and frameworks.
• Understand and ensure compliance with HIPAA, NIST, HITRUST, and related frameworks.
• Communicate complex security controls effectively to leaders and executives.
• Manage cybersecurity talent, including assessing training needs.
• Measure cyber risk and propose technical solutions aligned with business needs and risk tolerance.
• Build and monitor cybersecurity performance metrics.
• Apply incident response best practices.
• Manage vendor relationships and SLAs related to cybersecurity.

Qualifications

• Minimum 5 years in a senior cybersecurity role.
• Management experience in cybersecurity or IT preferred.

• Bachelor’s degree or equivalent experience required.

• ISC2 CISSP certification preferred.

Our Culture and Benefits

We prioritize our people, valuing diversity and inclusion. We are committed to delivering culturally effective care, building community partnerships, and supporting our team members to thrive.

Holistic benefits include:

• Medical premiums covered after 3 years.
• Employee savings plan with 4%-10% match based on tenure.
• Paid parental leave (up to 12 weeks).
• Caregiver leave.
• Adoption and surrogacy reimbursement.

Children’s Health is an equal opportunity employer, committed to a discrimination-free workplace in all employment practices.