Manager - Digital Services Information Security Risk

Corewell Health; Grand Rapids (MI); On-site; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a dynamic leader for their Information Security Risk team. This pivotal role involves overseeing risk management, ensuring compliance with HIPAA and NIST standards, and fostering a culture of performance excellence. The ideal candidate will possess a strong background in Information Security, with a focus on team management and budget oversight. Join a forward-thinking organization that values innovation and continuous improvement while offering a comprehensive benefits package designed to support your financial and personal well-being. If you're ready to make a significant impact in a demanding environment, this opportunity is for you.

Benefits

Comprehensive benefits package

On-demand pay program

Discounts on restaurants and services

Optional identity theft protection

Retirement options with contributions

Qualifications

• 3-5 years of supervisory or management experience in Information Security.
• Knowledge of HIPAA and NIST frameworks is essential.

Responsibilities

• Lead the Information Security Risk team and manage departmental budgets.
• Develop policies and ensure quality services in Information Security.

Skills

Information Security Risk

HIPAA Security Rule

NIST Cybersecurity Framework

Team Management

Budget Management

Education

Associate's Degree

Bachelor's Degree

Tools

Project Management Software

Job description

Job Summary

This role will report to the Director of Information Security GRPC that has a dual reporting structure to System Compliance and Digital Services. This role is funded by Digital Services; however, attending meetings and working with System Compliance leadership and teams will occur.

This position will lead the Information Security Risk team. The ideal candidate will have experience with and expertise in Information Security Risk with demonstrated knowledge of the HIPAA Security Rule and the NIST Cybersecurity Framework.

Accountable for the provision of quality services within assigned area(s) of responsibility. Responsible for resource planning and development, fiscal performance/budget management and the attainment of specific organizational goals. In collaboration with the Director, assumes responsibility for the development of site/service goals, providing input and management of the budget, and collaboration with the other team members to continually improve services and support of the management team. Along with other Managers, develops policies and procedures to support the site/service and the provision of quality services. As part of the Information Services (IS) management team, participates in the overall business planning and developing organization budgets, policies and operating procedures.

Essential Functions

• Plans, directs and evaluates the work of assigned work groups/teams.
• Establishes departmental goals and objectives, performance and production standards to assure quality.
• Acts as a customer advocate and provides ongoing communication with customers, staff and multidisciplinary team regarding customer, staff, management, quality care issues and departmental goals.
• Leads the tactical planning for their area(s) of Information Services, and participates in the preparation and management of an annual operating plan and budget. Develops capital and operational budgets for assigned area(s). Routinely monitors, manages and controls budget, analyzes variances and takes appropriate action. Develops plans for productivity improvements.
• Works in collaboration with leadership to inspire a culture that fosters and celebrates performance excellence particularly in care, practice, service and operational indicators. Champions an atmosphere exemplifying transformational care and service outcomes to internal and external customers. Creates an expectation that staff become involved in committees, projects and continuous improvement activities. Holds staff accountable for high performance against job descriptions, policies, procedures, controls and processes, as well as corporate and divisional guidelines.
• Responsible for the retention of talent in a demanding technology environment that requires 24/7/365 service availability. This includes developing an understanding of what encourages retention in each individual, and its application, using creative, approved methods (e.g. flexible work schedule, educational opportunities, etc.) that promote the appropriate work/life balance, while first ensuring agreed upon services levels are being met. Mentors, coaches and develops staff, and acts as a role model and resource.
• Engages in continuous study of the entire professional field, including best practices, to maintain the professional competence, knowledge and skills necessary for the satisfactory performance of all assigned responsibilities. Maintains knowledge of current trends and developments in the field by reading appropriate books, journals and other literature. Attends and participates in professional functions such as meetings, conferences, seminars and schools to maintain a high level of knowledge in the products, technology and business solutions to meet the changing industry opportunities.
• Ensures that the department is staffed with the appropriate mix and numbers to meet customer needs. Maintains payroll information. Responsible for interviewing, hiring and retaining staff/members of the team, performance monitoring of staff, initiating follow-through with disciplinary action and termination, in consultation with Human Resources, when appropriate.

Qualifications

• Required Associate's Degree technical school
• Preferred Bachelor's Degree
• 3 years of relevant experience of supervisory, management, or project leadership experience Required
• 5 years of relevant experience supervisory, management or project leadership experience Preferred
• Experience managing teams with disparate roles and focuses, and in directing the work of others Preferred
• Experience with and expertise in Information Security Risk with knowledge of the HIPAA Security Rule and the NIST Cybersecurity Framework Preferred
• Certified Information Security Manager (CISM) Certification or similar certification Preferred

Physical Demands

• Pallet to Waist (6" from floor) > 5 lbs: Seldom up to 10 lbs
• Waist to Waist > 5 lbs: Seldom up to 10 lbs
• Waist to Chest (below shoulder) > 5 lbs: Seldom up to 10 lbs
• Waist to Overhead > 5 lbs: Seldom up to 10 lbs
• Bilateral Carry > 5 lbs: Seldom up to 10 lbs
• Unilateral Carry > 5 lbs: Seldom up to 10 lbs
• Pushing Force > 5 lbs: Seldom up to 10 lbs
• Pulling Force > 5 lbs: Seldom up to 10 lbs
• Sitting: Frequently
• Standing: Occasionally
• Walking: Occasionally
• Forward Bend - Standing: Seldom
• Forward Bend - Sitting: Occasionally
• Trunk Rotation - Standing: Seldom
• Trunk Rotation - Sitting: Occasionally
• Reach - Above Shoulder: Seldom
• Reach - at Shoulder or Below: Seldom
• Handling: Occasionally
• Forceful Grip > 5 lbs: Seldom
• Forceful Pinch > 2 lbs: Seldom
• Finger/Hand Dexterity: Frequently

How Corewell Health cares for you

• Comprehensive benefits package to meet your financial, health, and work/life balance goals. Learn more here.

• On-demand pay program powered by Payactiv

• Discounts directory with deals on the things that matter to you, like restaurants, phone plans, spas, and more!

• Optional identity theft protection, home and auto insurance, pet insurance

• Traditional and Roth retirement options with service contribution and match savings

• Eligibility for benefits is determined by employment type and status

Primary Location

SITE - Corewell Health Place - 100 Corewell Drive NW - Grand Rapids

Department Name

Security Risk

Employment Type

Full time

Shift

Day (United States of America)

Weekly Scheduled Hours

40

Hours of Work

40

Days Worked

Monday to Friday

Weekend Frequency

N/A