Information Technology Governance Risk and Compliance Specialist

McLaren Health Care; Grand Blanc (MI); On-site; USD 80,000 - 110,000; Full time

Job summary

McLaren Health Care in Michigan seeks an Information Technology Governance, Risk and Compliance Specialist to lead the Information Security Communication and Awareness program across the organization. You will develop security tips, manage phishing campaigns, and maintain security policies and exceptions.

The role requires a BA/BS in MIS/CS/Engineering/Healthcare/Business, with preferred CISSP/CISM/CISA credentials and familiarity with NIST, ISO 27001 and COBIT. Schedule: Full-time, 8am–4:30pm.

Qualifications

• BA or BS in MIS, CS, Engineering, Healthcare, Business or related field.
• Professional security management certification such as CISSP, CISM or CISA preferred.
• 3 months experience with common information security management frameworks (NIST/ISO/IS0).

Responsibilities

• Develop and operate the Information Security Communication and Awareness program at corporate and hospital levels.
• Manage and operate phishing awareness campaigns.
• Provide regular email/blog security tips to staff.
• Manage Information Security Policies and Exceptions with rationale, costs and risks.
• Stay informed on daily security news and vulnerabilities.
• Organize Information Security program artifacts.

Skills

Information Security

Security Awareness

Policy Management

Phishing Campaigns

Communication Skills

Education

BA/BS MIS, CS, Engineering, Healthcare or Business

Tools

NIST 800-53

ISO/IEC 27001

COBIT

Job description

The McLaren system includes 12 hospitals across the state, ambulatory surgery centers, imaging centers, a 730-member employed primary and specialty care physician network, commercial and Medicaid HMOs covering more than 242,000 Michigan lives, home health, infusion and hospice providers, pharmacy services, a clinical laboratory network, and a wholly owned medical malpractice insurance company. McLaren operates Michigan’s largest network of cancer centers and providers, anchored by the Karmanos Cancer Institute, a National Cancer Institute-designated comprehensive cancer center. McLaren has 20,000 full-, part-time and contracted employees and more than 93,000 network providers throughout Michigan.

Information Technology Governance Risk and Compliance Specialist

The position is responsible for the overall Information Security Communication and Awareness program. This position communications Information Security issues to the end user across all of McLaren Health Care. The messages must be relevant to current information security issues effecting the healthcare industry and McLaren Health Care. Also, this position manages and organizes the artifacts of the Information Security program which includes performing policy reviews and updates, FAQs and policy exceptions.

Essential Functions and Responsibilities:

Develop and Operate the Information Security Communication and Awareness program at the corporate and hospital levels.

Manages and operates Phishing awareness campaigns

Provide regular email/blog "security tips" so staff improve their information security understanding and awareness

Manages Information Security Polices and Exceptions including gathering all relevant rationale, costs/constraints, and risks.

Keep informed on daily security news and vulnerabilities

Organizes Information Security program artifacts.

Other duties as assigned or when necessary to maintain efficient operations of the department and the Company as a whole.

Required:

BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Preferred:

Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

3 months experience of common information security management frameworks, such as NIST, including 800-53 and the Cybersecurity Framework, ISO/IEC 27001, and COBIT

Equal Opportunity Employer of Minorities/Females/Disabled/Veterans

Additional Information

• Schedule: Full-time
• Daily Work Times: 8am - 4:30pm
• On Call: No

McLaren Health Care is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identification, age, sex, marital status, national origin, disability, genetic information, height or weight, protected veteran or other classification protected by law.

My Profile

Create and manage profiles for future opportunities.

McLaren Health Care is an Equal Opportunity Employer. Qualified applicants will receive consideration for employmentwithout regard to race, color, religion, sexual orientation, gender identification, age, sex, marital status,national origin, disability, genetic information, height or weight, protected veteran or other classificationprotected by law.