IT Security Risk Mgr

JPS Health Network; Fort Worth (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

JPS Health Network in Fort Worth, TX is seeking an IT Security Risk Manager to lead risk assessment, control reviews, and risk mitigation across the health system. This salaried role reports to the Office of Legal Affairs and collaborates with IT, cybersecurity, compliance, and audit teams to protect information systems.

The ideal candidate will have 5+ years in IT risk management or cybersecurity, knowledge of risk frameworks, cloud platforms, and vendor risk assessments.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity, Risk Management, or related field.
• 5+ years in IT risk management, cybersecurity, IT audit, or IT governance.
• Experience with risk frameworks, cloud platforms, vendor assessments.

Responsibilities

• Conduct risk assessments and review IT control framework to identify gaps.
• Collaborate with IT, cybersecurity, infrastructure and business leaders to reduce risk.
• Provide risk guidance for new initiatives and system changes.
• Facilitate IT security risk workshops and awareness programs.
• Coordinate with auditors and support remediation planning.

Skills

IT risk management

Cybersecurity

Vendor risk assessments

Regulatory compliance

Incident response

Education

Bachelor's degree in Information Technology/Cybersecurity

Master's degree in Information Technology (preferred)

Job description

Who We Are

JPS Health Network is a $950 million, tax‑supported healthcare system in North Texas. Licensed for 582 beds, the network features over 25 locations across Tarrant County, with John Peter Smith Hospital a Level I Trauma Center, Tarrant County's only psychiatric emergency center, and the largest hospital‑based family medical residency program in the nation. The health network employs more than 7,200 people.

Acclaim Multispecialty Group is the medical practice group featuring over 300 providers serving JPS Health Network. Specialties range from primary care to general surgery and trauma. The Acclaim Multispecialty Group formed around a common set of incentives and expectations supporting the operational, financial, and clinical performance outcomes of the network. Our goal is to provide high quality, compassionate clinical care for every patient, every time.

Why JPS?

We're More Than a Hospital. We're 7,200 Of The Most Dedicated People You Could Ever Meet. Our Goal Is To Make Sure The People Of Our Community Get The Care They Need And Deserve. As Community Stewards, We Abide By Three Rules Of The Road.

• Own it. Everyone who wears the JPS badge contributes to our journey to excellence.
• Seek joy. Every day, every shift, we celebrate our patients, smile, and emphasize positivity.
• Don't be a jerk. Everyone is treated with courtesy and respect. Smiling, laughter, compassion - key components of our everyday experience at JPS.

When working here, you're surrounded by passion, diversity, and dedication. We look forward to meeting you!

For more information, visit www.jpshealthnet.org.

To view all job vacancies, visit www.jpshealthnet.org, www.jpshealthnet.org/careers, or www.teamacclaim.org.

Job Title

IT Security Risk Manager

Position Details

• Requisition Number: 45652
• Employment Type: Full Time
• Division: RISK MANAGEMENT
• Compensation Type: Salaried
• Job Category: Business / Professional
• Hours Worked: 8:00 AM – 5:00 PM
• Location: JPOC 1350
• Shift Worked: Day

Job Description

Job Summary: The IT Security Risk Manager is a key member of the Enterprise Risk Management team within the Tarrant County Hospital District’s Office of Legal Affairs. Reporting to the Deputy General Counsel, this role is responsible for leading the identification, assessment, monitoring, and mitigation of information technology and security risks across the health system. The IT Security Risk Manager plays a critical role in ensuring that information systems are appropriately protected and aligned with applicable regulatory requirements, industry standards, and internal policies.

Essential Job Functions & Accountabilities

• Conduct risk assessments and reviews of the IT control framework to identify control gaps and risk exposures.
• Partner with IT, cybersecurity, infrastructure, and business leaders to assess and reduce technology and security risk.
• Provide risk guidance and recommendations for new initiatives, technologies, system implementations, and significant system changes.
• Facilitate IT security risk workshops, training sessions, and awareness programs for employees and stakeholders.
• Assist with cybersecurity incident investigations, including root cause analysis and remediation tracking.
• Participate in business continuity and disaster recovery planning, testing, and evaluation activities.
• Recommend and evaluate controls to enhance system resilience and minimize operational and security impact.
• Identify and support the implementation of practical and cost‑effective solutions to IT security and risk issues.
• Provide aggregated risk oversight and supervision for high‑impact IT service areas.
• Develop, analyze, and present reports on key IT risk metrics, assessments, and activities to management and stakeholders.
• Build and maintain effective working relationships with risk team members, Enterprise Risk Management, Legal, IT, Compliance, and other key partners.
• Provide guidance in the development, implementation, and communication of IT risk‑related policies, standards, and procedures.
• Establish and maintain an external professional network with IT risk peers, industry groups, and applicable risk forums.
• Coordinate and work collaboratively with internal and external auditors, as requested.
• Evaluate alternative strategies to reduce the organization’s exposure to catastrophic and operational loss.
• Participate in end‑to‑end risk remediation planning, execution, monitoring, and closure activities.
• Support Office of Legal Affairs projects and strategic initiatives related to IT risk and security.
• Job description is not an all‑inclusive list of duties and may be subject to change with or without notice. Staff are expected to perform other duties as assigned.

Qualifications

Required Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, Risk Management, or related field of study from an accredited college or university.
• 5+ years of experience in IT risk management, cybersecurity, IT audit, or IT governance; including experience with IT risk frameworks, cloud platforms, and conducting vendor risk assessments and third‑party reviews.

Preferred Qualifications

• Master’s Degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related field of study from an accredited college or university.
• Experience in IT cloud environments and incident response.
• Experience managing enterprise‑wide risk programs.
• Experience working in IT or Risk Management in the healthcare sector, and supporting regulatory, audit, or compliance programs.
• Certified in one of the following: CRISC, CISSP, CISM, CEH, CompTIA Security+, or other cybersecurity certifications.

Location Address

1350 S. Main Street
Fort Worth, Texas, 76104
United States