Information Technology Governance Risk and Compliance Specialist

McLaren Health Care; Lansing (MI); On-site; USD 68,000 - 92,000; Full time

Job summary

McLaren Health Care is seeking an Information Security Communications and Awareness specialist responsible for delivering a comprehensive program across corporate and hospital levels. You will craft messages on current information security issues affecting healthcare and McLaren, and organize policy reviews, FAQs, and policy exceptions.

In this role you will lead phishing awareness campaigns, publish regular security tips, and manage information security policies and artifacts while staying

Qualifications

• BA or BS in MIS, CS, engineering, healthcare, business or related field.
• 3+ months experience with security frameworks (NIST 800-53, CSF, ISO/IEC 27001, COBIT).
• Professional certifications (CISSP, CISM, CISA) preferred.

Responsibilities

• Develop and operate the Information Security Communication and Awareness program at corporate and hospital levels.
• Manage phishing awareness campaigns.
• Provide regular security tips via email/blog to staff.
• Manage Information Security policies and exceptions with rationale, costs, and risks.
• Stay informed on daily security news and vulnerabilities.
• Organize Information Security program artifacts.
• Other duties as assigned to maintain department and company operations.

Skills

Security awareness

Phishing campaigns

Policy management

Security tips

Education

Bachelor's degree in MIS/CS/Engineering/Healthcare/Business

Tools

NIST Cybersecurity Framework

ISO/IEC 27001

COBIT

Job description

The position is responsible for the overall Information Security Communication and Awareness program. This position communications Information Security issues to the end user across all of McLaren Health Care. The messages must be relevant to current information security issues effecting the healthcare industry and McLaren Health Care. Also, this position manages and organizes the artifacts of the Information Security program which includes performing policy reviews and updates, FAQs and policy exceptions.

Essential Functions and Responsibilities

• Develop and Operate the Information Security Communication and Awareness program at the corporate and hospital levels.
• Manages and operates Phishing awareness campaigns
• Provide regular email/blog "security tips” so staff improve their information security understanding and awareness
• Manages Information Security Polices and Exceptions including gathering all relevant rationale, costs/constraints, and risks.
• Keep informed on daily security news and vulnerabilities
• Organizes Information Security program artifacts.
• Other duties as assigned or when necessary to maintain efficient operations of the department and the Company as a whole.

Required

• BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Preferred

• Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials
• 3 months experience of common information security management frameworks, such as NIST, including 800-53 and the Cybersecurity Framework, ISO/IEC 27001, and COBIT

Equal Opportunity Employer of Minorities/Females/Disabled/Veterans

Additional Information

• Schedule: Full-time
• Requisition ID: 26011741
• Daily Work Times: 8am - 4:30pm
• Hours Per Pay Period: 80
• On Call: No
• Weekends: No