Senior Information Security GRC Lead

CareSource Management Services; United States; A distancia; USD 113.000 - 198.000; Jornada completa

Descripción de la vacante

CareSource is seeking an Information Security GRC Analyst IV to manage day-to-day and strategic information security risk and compliance programs. You will ensure activities remain within risk tolerance and comply with policies and standards.

You will collaborate with stakeholders to measure, monitor, and report cybersecurity risks, build risk mitigation plans, and act as the primary liaison with auditors and regulators. A strong background in IT controls and governance is required.

Formación

• Bachelor's degree is required.
• Master's degree is preferred.
• Ten years of IT, IT Risk, or Security experience required.
• Five years of Security Risk or Program Management experience preferred.
• Certifications in Information Security such as CISSP, CRISC, SSCP, CISA, CISM preferred.
• Project Management Professional (PMP) preferred.

Responsabilidades

• Collaborate with stakeholders to execute processes and controls related to information security risk and compliance.
• Measure, monitor, and report cybersecurity risk, security metrics, and risk mitigation plans.
• Report exceptions to information risk management policies and procedures to management.
• Engage staff/vendors to develop risk mitigation plans for identified risks.
• Design and manage a framework of IT controls to protect information assets and support auditors/regulators.

Conocimientos

IT risk management

Regulatory compliance

Educación

Bachelor's degree

Master's degree

Descripción del empleo

CareSource is seeking an Information Security GRC Analyst IV to manage day-to-day and strategic information security risk and compliance programs. You will ensure activities remain within risk tolerance and comply with policies and standards.

You will collaborate with stakeholders to measure, monitor, and report cybersecurity risks, build risk mitigation plans, and act as the primary liaison with auditors and regulators. A strong background in IT controls and governance is required.