Strategic Information Security Risk & Governance Lead

Blue Shield of CA; San Diego (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Stellarus seeks an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance. You will mature the compliance function and ensure IT audit-readiness across healthcare IT services, communicating complex concepts clearly to auditors and stakeholders.

Ideal candidates bring 7+ years in information security, strong governance/risk experience, and the ability to drive data-driven decisions while maintaining a

Qualifications

• Bachelor's degree or equivalent experience.
• Minimum 7 years of relevant information security experience.
• Experience with security assurance frameworks (NIST, HIPAA, SOC 2).
• Experience interacting with internal/external auditors.
• Ability to communicate technical concepts to non-technical audiences.
• Strong organizational skills and attention to detail.
• Proven project management and delivery capability.
• Healthcare information security governance, risk, and compliance familiarity.
• Ability to learn Stellarus' security controls and maintain knowledge base.
• Ability to drive data-driven decisions and key metrics.

Responsibilities

• Translate regulatory, contractual, policy, and security requirements into governance and controls.
• Mature the Compliance function and ensure IT audit-readiness.
• Support governance for IT services and the health IT security posture.
• Explain technical concepts to auditors and stakeholders.
• Maintain a security knowledge base for multiple projects.

Skills

7+ years experience

Security governance

Risk management

Project management

Auditor liaison

Communication skills

Agile mindset

Information security concepts

Education

Bachelor's degree or equivalent experience

Job description

Stellarus seeks an Information Security Risk and Governance Specialist to translate regulatory, contractual, policy, and security requirements into sustainable governance. You will mature the compliance function and ensure IT audit-readiness across healthcare IT services, communicating complex concepts clearly to auditors and stakeholders.

Ideal candidates bring 7+ years in information security, strong governance/risk experience, and the ability to drive data-driven decisions while maintaining a