Information Technology Governance Risk and Compliance Specialist

McLaren Health Care; Lansing (MI); On-site; USD 70,000 - 110,000; Full time

Job summary

McLaren Health Care in Lansing, MI is seeking a GRC specialist to support the development and implementation of GRC programs. You will assist in risk assessments, monitor regulatory changes, and ensure adherence to policies while collaborating across departments to promote ethical practices and maintain documentation.

The role involves conducting audits, coordinating with stakeholders, and providing recommendations to mitigate risks within the organization.

Qualifications

• BA/BS in MIS/CS/Engineering, Healthcare, Business or related field.
• IT or Security certification preferred.

Responsibilities

• Provides IT-GRC review of non-standard software requests and coordinates assessment with related stakeholders.
• Manages Findings and Corrective Actions assigned from internal and external assessments.
• Manages communications and follow-ups with internal and external stakeholders regarding IT-GRC assessments.
• Produces reports and metrics to leadership teams and committees.
• Performs Service Now Whitelist Requests and coordinates results with stakeholders.
• Assists in coordinating and facilitating interviews and meetings for Information Security-related assessments (HIPAA, external assessments, etc.).

Skills

Risk assessments

Regulatory monitoring

Audits

Policy documentation

Stakeholder coordination

Education

BA/BS in MIS/CS/Engineering/Healthcare/Business

Job description

Position Summary:

The GRC (Governance, Risk, and Compliance) specialist is responsible for supporting the development and implementation of GRC programs within MHC. They assist in conducting risk assessments, monitoring regulatory changes, and ensuring adherence to legal and internal policies. Their role involves collaborating with various departments to promote ethical practices, conducting audits, and providing recommendations to mitigate risks. Additionally, they help in developing and maintaining documentation related to compliance and risk management processes.

Essential Functions and Responsibilities As Assigned:

• Provides IT-GRC review of ‘non-standard software requests’ and coordinates assessment with related stakeholders
• Manages Findings and Corrective Actions assigned from internal and external assessments
• Manages communications and follow-ups with internal and external stakeholders regarding IT-GRC assessments
• Produces reports and metrics to leadership teams and committees
• Performs Service Now Whitelist Requests and coordinates results with stakeholders
• Assists in coordinating and facilitating interviews and meetings for Information Security-related assessments, such as HIPAA, external assessments, etc.

Qualifications:

Required:

• BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Preferred:

• IT and/or Security certification

Additional Information

• Schedule: Full-time
• Requisition ID: 26011741
• Daily Work Times: 8am - 4:30pm
• Hours Per Pay Period: 80
• On Call: No
• Weekends: No