Information Security Risk & Governance Lead

Blue Shield of CA; Lodi (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Blue Shield of CA is seeking an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance and control practices.

The role supports IT audit-readiness and the maturation of the Compliance function, ensuring policy alignment with regulations and control standards across healthcare information security governance, risk, and compliance.

Qualifications

• Bachelor's degree or equivalent experience.
• 7+ years of relevant experience.
• Experience with security assurance and trust frameworks (NIST, HIPAA, SOC 2).
• Experience interacting with auditors and explaining technical concepts.
• Ability to communicate effectively with customers and internal teams.
• Superior organizational skills and attention to detail.
• Proven ability to manage projects and deliverables.
• Translate complex technical concepts for a non-technical audience.
• Knowledge of healthcare information security governance, risk and compliance.

Responsibilities

• Support Stellarus by translating regulatory, contractual, policy, and security requirements into governance and control practices.
• Mature the Compliance function and ensure IT audit-readiness with policy, regulations and control standards.
• Collaborate with internal/external auditors and explain technical concepts.
• Learn Stellarus' security controls and maintain a security knowledge base for multiple projects.

Skills

Security governance

NIST

HIPAA

SOC 2

Auditing experience

Communication

Project management

Risk management

Analytical thinking

Education

Bachelor's degree or equivalent

Job description

Blue Shield of CA is seeking an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance and control practices.

The role supports IT audit-readiness and the maturation of the Compliance function, ensuring policy alignment with regulations and control standards across healthcare information security governance, risk, and compliance.