Lead Security Compliance Analyst

Centene Management Company LLC; Missouri; Hybrid; USD 108,000 - 199,000; Full time

Benefits offered by this job

Competitive pay

Health insurance

401K and stock purchase plans

Tuition reimbursement

Paid time off plus holidays

Flexible work arrangements (remote,hyb

Flexible work arrangements (remote,hyb

Job summary

Centene is seeking a Senior Information Security Manager to lead projects that strengthen enterprise security, automate processes and provide reporting to executives and the board. You will drive risk reduction, policy alignment and control design across programs and systems.

The role requires 6+ years in security, a Bachelor’s in Information Security or related field, and knowledge of NIST 800-53, HITRUST and ISO 27001.

Qualifications

• 6+ years of experience in security domains.
• Bachelor’s degree in Information Security or related field, or equivalent experience.
• Knowledge of NIST 800-53, HITRUST and ISO 27001.

Responsibilities

• Leads projects to develop, monitor, maintain, improve and automate enterprise security processes.
• Provides reporting to executives and the Board on security posture and metrics.
• Oversight of remediation activities and security control design across programs and systems.

Skills

Security risk management

Policy and standards knowledge

Regulatory compliance

Education

Bachelor’s degree in Information Security or related field

Job description

Position Purpose:

Leads projects to develop, monitor, maintain, improve and automate the enterprise security processes, reduce the overall enterprise security risk and creates reports that will impact decisions made at both the executive and Board levels. Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT. Leads projects to improve and strengthen the enterprise security posture and reduce security risk, including requirements collection, initiation, planning, execution, status reporting and closure. Mature and automate processes, where possible, to manage security risk including. Maintains awareness of existing and proposed enterprise security policies and standards. Provides support in security policy and standard development. Identifies regulatory changes that will affect information security policies, standards and procedures, and recommends appropriate changes. Supports security control owners with control design and implementation Leads the design, evaluation and oversight of controls for key security and security IT projects, programs, applications and systems, e.g. the Enterprise Control Framework Leads activities related to the lifecycle of remediation activities including: delivery timeline tracking, action plan development, gathering and review of evidence artifacts, providing feedback regarding appropriateness of evidence artifacts, and development of documentation to submit for closure Performs assigned tasks with in the GRC tool within the defined SLAs. Leads other team members. Performs related duties as assigned or requested, including implementation of capacity planning, metrics and information security process improvements. Prepares Compliance documentation for Senior Management including team, Board, and other reporting initiatives as needed. Continues to look for ways to improve processes and contributes to excellence in team. Leads complex projects, on time and on budget, escalating concerns and providing weekly updates. This is a “go to” resource inside and outside the team. Develops and implements best practices regarding gathering, reporting and representation of security KPIs and KRIs to various stakeholders. Performs related duties as assigned or requested, including security metrics reporting and information security process improvements.

Education/Experience

Bachelor’s degree in Information Security, related field, or equivalent experience required. 6+ years of experience with security domains required. Knowledge of NIST 800-53, HITRUST, and ISO 27001 required.

License/Certification

CISA, CGEIT, CRISC or CISM required. CISSP preferred:

Pay Range

$107,700.00 - $199,300.00 per year

At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday.

Centene offers a comprehensive benefits package including:

• competitive pay
• health insurance
• 401K and stock purchase plans
• tuition reimbursement
• paid time off plus holidays
• flexible approach to work with remote, hybrid, field or office work schedules

Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility.

Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act.

Should you need an accommodation, please email [e-mail].

Centene is committed to helping people live healthier lives. We provide access to high-quality healthcare, innovative programs and a wide range of health solutions that help families and individuals get well, stay well and be well.