Information Security Architect - IT Risk Management

UAB Medicine; Birmingham (AL); On-site; USD 123,000 - 206,000; Full time

Benefits offered by this job

PSLF eligible

Education assistance

Paid time off

Job summary

UAB Medicine is seeking an experienced IT Risk and Compliance professional to manage the enterprise AI governance platform and lead GRC initiatives within a major health system. You will administer risk assessments, remediation efforts, and governance reporting while promoting privacy and regulatory training across teams.

Qualified candidates hold a CISSP and have extensive experience in healthcare IT risk management and compliance.

Qualifications

• Bachelor's degree in Information Systems or a related field and six years of related experience required.
• Work experience may substitute for the education requirement.
• Certified Information Systems Security Professional (CISSP) certification preferred.

Responsibilities

• Manage the enterprise AI Governance platform
• Administer the Enterprise GRC solution
• Serve as GRC lead for risk assessments, risk remediation, control framework implementation, risk reporting, and governance activities
• Promote awareness and training of privacy, regulatory requirements, and security best practices.

Skills

CISSP

CRISC

CISM

Education

Bachelor's degree in Information Systems or related field

Job description

Position Overview

Pay range: $1236,470 - $205,515 / year

Benefits and perks available for eligible positions include: robust educational assistance programs, generous paid time off, employee assistance and wellness programs, paid parental leave, qualifying employer for the Public Service Loan Forgiveness (PSLF) Program, plus more.

Job Highlights

A team of more than 600 professionals, Health System Information Services (HSIS) works to keep UAB Medicine’s IT systems and infrastructure running smoothly to deliver quality and innovative care to our patients. Join our nationally ranked team at UAB Medicine, amongst the top 150 Places to Work in 2025 as ranked by Becker’s Healthcare. Also, we have achieved top ratings in the Most Wired survey for a total of 21 years.

Job Description

To independently employ a broad knowledge of principles, practices, and procedures in a particular field of specialization to plan, design, develop and support systems and projects. To conduct research and analysis and presents findings for review. To carry out complex assignments requiring the development of new or improved techniques and procedures.

Qualifications

Bachelor's degree in Information Systems or a related field and six (6) years of related experience required. Work experience may substitute for education requirement. Certified Information Systems Security Professional (CISSP) certification preferred.

Preferred Skills

• CISSP
• CRISC
• CISM

Responsibilities

• Manage the enterprise AI Governance platform
• Administer the Enterprise GRC solution
• Serve as GRC lead for risk assessments, risk remediation, control framework implementation, risk reporting, and governance activities
• Promote awareness and training of privacy, regulatory requirements, and security best practices.

Experience with two or more programs outlined below in a Healthcare setting preferred

• IT Risk Management
• Performing risk assessments on vendors, departments, systems and facilities
• Working alongside business/system owners to remediate risk findings
• Administrating GRC system (LogicGate, MetricsStream, Archer, etc.)
• Following up with vendors where risk items have been identified for remediation
• Working with risk owners to document remediation plans and exceptions
• Assessing risk of vulnerabilities of assets on the network
• Mapping risk findings to common controls
• Determining risk of firewall requests
• Documentation of control procedures
• Assist with development of controls assurance program
• AI Governance, Risk and Compliance
• Administering the enterprise AI governance platform to maintain an inventory of AI assets, including machine learning models, generative AI applications, agentic AI solutions, and third-party AI technologies.
• Conducting risk assessments of AI solutions, AI-enabled applications, and third-party AI vendors
• Developing and maintaining AI governance policies, standards, procedures, and acceptable use requirements
• Reviewing AI implementations for compliance with security, privacy, regulatory, and organizational requirements
• Assessing AI technologies against HIPAA, NIST CSF, NIST AI RMF, NIST SP 800-53, and other applicable frameworks and regulations
• Collaborating with Privacy, Compliance, Legal, Research, Clinical, and IT teams to promote the secure and responsible use of AI technologies
• Compliance Management (PCI, HIPAA, NIST, URAC, Meaningful Use, etc.)
  • Coordinating technical application risk assessments that meet regulatory requirements
  • Coordinating pen test, risk assessment and compliance assessments with external assessors
• Assisting with the implementation of a cybersecurity framework and controls (PCI NIST CSF, CIS top 20, etc.)
• Performing entity wide assessments for the organization

Why Work at UAB Medicine

We are UAB Medicine, Alabama’s largest and most comprehensive health system, recognized nationally for delivering world-class patient care, pioneering research, and cutting-edge medical education. We proudly serve more than 1.2 million patients each year – from every county in Alabama, all 50 states, and many countries around the world. Our network spans numerous hospitals, emergency departments, many other sites of care, and a team of over 2,000 physicians. Our key facilities include UAB Hospital – ranked the No. 1 hospital in Alabama by U.S. News & World Report and home to the state’s first ACS-verified Level I adult trauma center and only Magnet-designated hospital – along with UAB Hospital-Callahan Eye and five UAB St. Vincent’s hospitals serving central Alabama.

UAB Medicine offers careers across a wide range of practice environments, from our internationally renowned academic medical center and award-winning community hospitals to our primary and specialty care clinics across the state. Whether you’re seeking the fast-paced learning environment of a tertiary care setting or the close-knit environment of a community facility, there’s a place for you on our team where you can become part of a mission-driven organization committed to delivering life-changing care. With nearly every medical specialty represented and unlimited opportunities for growth, you’ll find the right fit for your skills and career goals. We care for you by offering comprehensive, industry-leading benefit packages to support the individual preferences and circumstances of our diverse staff.