InfoSec Awareness & GRC Specialist

McLaren Health Care; Lansing (MI); On-site; USD 68,000 - 92,000; Full time

Job summary

McLaren Health Care is seeking an Information Security Communications and Awareness specialist responsible for delivering a comprehensive program across corporate and hospital levels. You will craft messages on current information security issues affecting healthcare and McLaren, and organize policy reviews, FAQs, and policy exceptions.

In this role you will lead phishing awareness campaigns, publish regular security tips, and manage information security policies and artifacts while staying

Qualifications

• BA or BS in MIS, CS, engineering, healthcare, business or related field.
• 3+ months experience with security frameworks (NIST 800-53, CSF, ISO/IEC 27001, COBIT).
• Professional certifications (CISSP, CISM, CISA) preferred.

Responsibilities

• Develop and operate the Information Security Communication and Awareness program at corporate and hospital levels.
• Manage phishing awareness campaigns.
• Provide regular security tips via email/blog to staff.
• Manage Information Security policies and exceptions with rationale, costs, and risks.
• Stay informed on daily security news and vulnerabilities.
• Organize Information Security program artifacts.
• Other duties as assigned to maintain department and company operations.

Skills

Security awareness

Phishing campaigns

Policy management

Security tips

Education

Bachelor's degree in MIS/CS/Engineering/Healthcare/Business

Tools

NIST Cybersecurity Framework

ISO/IEC 27001

COBIT

Job description

McLaren Health Care is seeking an Information Security Communications and Awareness specialist responsible for delivering a comprehensive program across corporate and hospital levels. You will craft messages on current information security issues affecting healthcare and McLaren, and organize policy reviews, FAQs, and policy exceptions.

In this role you will lead phishing awareness campaigns, publish regular security tips, and manage information security policies and artifacts while staying