Senior InfoSec GRC Analyst – HIPAA/PCI Focus

altamed; Commerce (CA); On-site; USD 121,780 - 152,225; Full time

Benefits offered by this job

Medical, Dental & Vision insurance

403(b) Plan with employer matching

FSAs (Flexible Spending Accounts)

Commuter FSA

Career Development & Advancement

Paid Time Off & Holidays

Paid CME Days

Malpractice tail coverage

Tuition Reimbursement

Employee Discounts

Referral Bonus

Pet Care Insurance

Job summary

AltaMed seeks a Senior Analyst, Information Security GRC to lead the corporate-wide program. You will collaborate with Information Services, OCRM, Legal, HR, and Procurement to implement IT controls and ensure compliance with HIPAA, PCI-DSS, and privacy regulations.

The role requires a Bachelor's degree, 5+ years in IT audit or risk management, and an active CISSP certification; experience with cloud security and vendor risk is a plus. Competitive compensation and benefits are provided.

Qualifications

• Bachelor's degree in business, information systems management, or related field.
• Minimum 5 years of IT audit or IT risk management experience.
• Experience leading security assessments, vendor risk assessments, and InfoSec control management.
• Working knowledge of HIPAA, Privacy, and PCI data requirements, and other state / federal regulatory requirements of sensitive information.
• Experience with application security, SaaS, and/or cloud security is a plus.
• Active CISSP certification required.

Responsibilities

• Lead the corporate-wide Information Security GRC program.
• Collaborate with IS, OCRM, Legal, HR and Procurement to implement IT controls and minimize risk.
• Maintain and administer the IT Risk Register and Information Security Awareness Training program.
• Liaise with internal and external auditors to ensure successful audits.
• Manage Security Exception/Risk Acceptance processes and risk-based change management.

Skills

IT risk management

Security assessments

Vendor risk assessments

HIPAA/Privacy/PCI knowledge

Cloud security

Education

Bachelor's degree in business, information systems management, or related field

CISSP certification

Job description

AltaMed seeks a Senior Analyst, Information Security GRC to lead the corporate-wide program. You will collaborate with Information Services, OCRM, Legal, HR, and Procurement to implement IT controls and ensure compliance with HIPAA, PCI-DSS, and privacy regulations.

The role requires a Bachelor's degree, 5+ years in IT audit or risk management, and an active CISSP certification; experience with cloud security and vendor risk is a plus. Competitive compensation and benefits are provided.