Engineer III - Cybersecurity Risk Analyst

Inland Empire Health Plans; Rancho Cucamonga (CA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

On-site fitness center

Medical, Dental, Vision

Life and disability insurance

Career advancement

Wellness programs

Flexible Spending Account

CalPERS retirement

457(b) matching

Pet care insurance

Job summary

Inland Empire Health Plans is seeking a Cybersecurity Risk Analyst to strengthen IEHP's cybersecurity posture within governance, risk, and compliance. The role provides technical expertise for developing and implementing the enterprise information security program, requiring leadership and project management experience.

You will lead security assurance testing, risk assessments, awareness training, and the portfolio of security controls, aligning with IEHP’s quality goals such as HEDIS, CAHPS,

Qualifications

• Five years in cybersecurity with focus on governance, compliance and risk management.
• Knowledge of laws, regulations, policies and ethics related to cybersecurity and privacy.
• CISSP or other security certifications preferred.

Responsibilities

• Assess IEHP’s cybersecurity posture and advance governance, risk, and compliance.
• Develop and implement the enterprise information security program with leadership.
• Lead assurance testing, risk assessments, training, and security controls portfolio.

Skills

Cybersecurity governance

Privacy principles

Security policy implementation

Education

Bachelor’s degree in Information Systems Security or related field

Job description

What you can expect!

Find joy in serving others with IEHP! We welcome you to join us in “healing and inspiring the human spirit” and to pivot from a “job” opportunity to anauthentic experience!

The Cybersecurity Risk Analyst is a cybersecurity program and control assessor and advisor in governance, risk, and compliance functions. This position is responsible for the assessing and advancing of IEHP’s cybersecurity posture and capability to safeguard its digital assets.

The purpose of this position is to provide highly skilled technical and cyber expertise for development and implementation of the enterprise information security program. Responsibilities require leadership and project management experience, as well as expertise to ensure effective system-wide security capability analysis; best practices and assurance testing; risk assessment; awareness and education; and development of security control portfolio.

Commitment to Quality: The IEHP Team is committed to incorporate IEHP’s Quality Program goals including, but not limited to, HEDIS, CAHPS, and NCQA Accreditation.

Perks

IEHP is not only committed to healing and inspiring the human spirit of our Members, but we also aim to match our team members with the same energy by providing prime benefits and more.

• Competitive salary
• State of the art fitness center on-site
• Medical Insurance with Dental and Vision
• Life, short-term, and long-term disability options
• Career advancement opportunities and professional development
• Wellness programs that promote a healthy work-life balance
• Flexible Spending Account – Health Care/Childcare
• CalPERS retirement
• 457(b) option with a contribution match
• Paid life insurance for employees
• Pet care insurance

Education & Requirements

• Five (5) years in cybersecurity with focus on governance, compliance and risk management
• Bachelor’s degree in Information Systems Security or in a computer related field or similar technical field from an accredited institution required
• Certified Information Systems Security Professional (CISSP) or other industrial and vendor security certifications preferred

Key Qualifications

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Skilled in Cybersecurity, privacy principles and organizational requirements
• Ability to apply cybersecurity and privacy principles to IEHP business and technical requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)