Senior Information Security Risk & Governance Advisor

Blue Shield of CA; Rancho Cordova (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance and control practices.

The role supports IT risk governance within the Information Security Compliance organization, maturing the function and ensuring audit readiness across policy, regulations and control standards, with a focus on healthcare information security context.

Qualifications

• Bachelor's degree or equivalent experience.
• 7+ years of prior relevant experience.
• Understanding of security assurance and trust frameworks (NIST, HIPAA, SOC 2).
• Experience interacting with auditors and explaining technical concepts.
• Ability to communicate with customers and internal teams.
• Strong organizational skills and attention to detail; agile mindset.
• Proven ability to manage projects to completion.
• Translate complex concepts for non-technical audiences.
• Knowledge in risk management, critical thinking and decision-making.
• Intermediate healthcare information security governance, risk and compliance.

Responsibilities

• Translate regulatory, contractual, policy and security requirements into sustainable governance and control practices.
• Support IT services governance and maturation within the Compliance function; ensure IT audit-readiness with policy and control standards.

Skills

7+ years experience

Security frameworks

Auditing experience

Communication

Project management

Non-technical translation

Risk management

Healthcare security

Knowledge management

Education

Bachelor's degree or equivalent experience

Job description

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance and control practices.

The role supports IT risk governance within the Information Security Compliance organization, maturing the function and ensuring audit readiness across policy, regulations and control standards, with a focus on healthcare information security context.