Senior InfoSec GRC Analyst – HIPAA & PCI

AltaMed Health Services Corp; Commerce (CA); On-site; USD 122,000 - 152,000; Full time

Benefits offered by this job

Medical, Dental and Vision insurance

403(b) Retirement plan with employer

Job summary

AltaMed Health Services Corp is seeking a Senior Analyst for Information Security GRC to lead the corporate-wide program and ensure IT controls meet HIPAA, PCI, and privacy requirements. You will collaborate across IS, OCRM, Legal, HR, and Procurement to minimize risk and support audits.

The role requires 5+ years in IT audit or risk management and a CISSP certification, with experience in security assessments and vendor risk management.

Qualifications

• Bachelor's degree in business or information systems management required.
• 5+ years of IT audit or IT risk management experience required.
• Experience leading security assessments and vendor risk assessments.
• Working knowledge of HIPAA, Privacy, and PCI data requirements.
• CISSP certification required.

Responsibilities

• Lead the corporate-wide Information Security GRC program.
• Collaborate with Information Services, OCRM, Legal, HR, and Procurement to ensure IT controls and compliance.
• Develop, implement, and maintain information security policies and guidelines; act as SME for HIPAA, PCI and Privacy.
• Oversee vulnerability management, vendor risk programs, risk-based change management, and audits.

Skills

IT audit

IT risk management

Security assessments

HIPAA/Privacy/PCI data requirements

CISSP certification

Cloud security

Education

Bachelor's degree in business, information systems management, or related field

Job description

AltaMed Health Services Corp is seeking a Senior Analyst for Information Security GRC to lead the corporate-wide program and ensure IT controls meet HIPAA, PCI, and privacy requirements. You will collaborate across IS, OCRM, Legal, HR, and Procurement to minimize risk and support audits.

The role requires 5+ years in IT audit or risk management and a CISSP certification, with experience in security assessments and vendor risk management.