IT Security Supervisor & GRC Leader

UCSF Health; San Francisco (CA); Sur place; USD 180 000 - 280 000; Plein temps

Résumé du poste

UCSF Health seeks a strategic Head of Governance, Risk, and Compliance to lead enterprise cyber risk and regulatory compliance across UCSF Health, Campus, Foundation, and affiliates. You will guide the GRC team, mentor staff, and coordinate with senior leaders and auditors on complex risk programs.

Role requires in-depth knowledge of HIPAA, PCI-DSS, NIST, and UC policies, with a track record of risk-based decision making and program optimization.

Qualifications

• Bachelor's degree in related area or equivalent experience/training.
• Minimum 5 years in cybersecurity, information security, GRC or related.
• Advanced knowledge of cybersecurity, privacy, and compliance laws/frameworks relevant to higher ed and healthcare.
• Experience directing and coordinating technical or risk/compliance staff.
• Experience providing day-to-day functional leadership for security, risk, or compliance programs.
• Advanced experience leading security risk assessments, compliance reviews, remediation planning, and risk-based decisions.
• Ability to communicate actions to departments and leadership on IT security, compliance, and risk.
• Experience developing and improving security workflows, metrics, and program docs.
• Advanced experience with GRC/IRM platforms, risk assessments, risk acceptance, and audit responses.

Responsabilités

• Lead enterprise cyber risk and compliance services across UCSF Health and affiliates.
• Direct day-to-day execution of GRC activities and staff direction.
• Interface with senior stakeholders, auditors, and business owners for guidance and direction.
• Oversee policy interpretation, contract reviews, third-party reviews, and compliance activities (PCI-DSS, HIPAA, NIST).
• Drive program improvements including ITSM workflows, metrics, and training.
• Utilize AI solutions to increase service capacity and delivery speed.
• Collaborate with UC system offices on system-wide initiatives.

Connaissances

GRC leadership

Risk assessment

Regulatory knowledge

Audit coordination

Stakeholder communication

Team mentoring

Formation

Bachelor's degree in related field

Outils

ServiceNow IRM

GRC/ITSM platforms

Privacy regulations knowledge

Description du poste

UCSF Health seeks a strategic Head of Governance, Risk, and Compliance to lead enterprise cyber risk and regulatory compliance across UCSF Health, Campus, Foundation, and affiliates. You will guide the GRC team, mentor staff, and coordinate with senior leaders and auditors on complex risk programs.

Role requires in-depth knowledge of HIPAA, PCI-DSS, NIST, and UC policies, with a track record of risk-based decision making and program optimization.