IT Security Risk Analyst III - Supplier Risk - (Lexington) in Lexington, Kentucky For Sale

Summary Lead Information Security reviews to identify gaps with CHI Information Security requirements. Lead IT risk assessments to identify key corporate security vulnerabilities that affect the confidentiality, integrity and availability of electronic protected health information and other company confidential data and provides support to systems owners to address and implement solutions to identified security and risk issues. Provide Information Security guidance at all stages of the System Development and Acquisition Life Cycle. Participate in the development of the Information Security Awareness Program Essential Duties Lead assessments of current security technology and authentications systems and evaluate against HIPAA, Federal and State Information Protection and Privacy regulations, CHI Information Security Policies, and other relevant regulations pertaining to the protection of Enterprise information assets with respect to information security. Develop and advance CHI Information Security policies, standards and procedures in conjunction with the application and technology teams responsible for the day-to-day systems configuration and operation Proactively secure and audit network security environment and provide actionable information pertaining to risk discovery and remediation technologies, techniques, and processes. Lead the assessment and review of new and existing technology infrastructure to identify key risk areas, and ensure adequate levels of control are in place to address those risks and develop risk mitigation techniques and processes to ensure that all reviews as actionable by system manager and the operations staff. Lead the consultative process and advise personnel in IT departments to coordinate Information Security activities. Support Regional Information Security Officers in Information Security activities as needed. Develop and lead activities supporting the IT Risk Management process such as data classification and security controls maintenance. Lead Collaborative programs with personnel in ITS and all business units to ensure that electronic data security is consistently implemented throughout the enterprise. Update skills as necessary to support CHI Information Security and remain knowledgeable of industry standards and advancements Qualifications Education Bachelor of Science degree in computer science with emphasis on IT security required. Experience Minimum of 7 years of progressive experience in information services including 5 years in systems security, including maintenance and use of security products in a distributed enterprise environment, and experience in compliance with federal security regulations. Minimum of 3 years' experience in healthcare or security consulting. Require in-depth understanding of Information Security practices for the network, servers, databases, applications, and advanced use of Information Security assessment techniques. May substitute an equivalent combination of education and experience. License/Certification Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA), required. Additional Responsibilities Collaborate with all Information Security and Privacy Leaders in implementing consistent security safeguards and controls throughout the organization Facilitate and review control and compliance initiatives, such as self-assessments, third party reviews and due diligence initiatives. Build relationships with corporate wide process improvement experts to leverage use of the technology organization wide capabilities. Work with ITS Leadership to establish and document standard security policies and procedures Demonstrates a commitment to service, hospital values and professionalism through appropriate conduct and demeanor at all times. Additional Responsibilities: Demonstrates a commitment to service, organization values and professionalism through appropriate conduct and demeanor at all times. Adheres to and exhibits our core values : Reverence : Having a profound spirit of awe and respect for all creation, shaping relationships to self, to one another and to God and acknowledging that we hold in trust all that has been given to us. Integrity: Moral wholeness, soundness, uprightness, honesty and sincerity as a basis of trustworthiness. Compassion: Feeling with others, being one with others in their sorrows and joys, rooted in the sense of solidarity as members of the human community. Excellence: Outstanding achievement, merit, virtue; continually surpassing standards to achieve/maintain quality. Maintains confidentiality and protects sensitive data at all times. Adheres to organizational and department specific safety standards and guidelines. Works collaboratively and supports efforts of team members. Demonstrates exceptional customer service and interacts effectively with physicians, patients, residents, visitors, staff and the broader health care community. EOE F/M/Vet/Disabled CBCHI #GLDRNAT Shift: 1 Scheduled Hours per 2-week Pay Period: 80 Weekends Required: None Status: false
Source: http://www.juju.com/jad/xxxxxxxxvqegha?partnerid=af0exxxx314cbc501beebacaxxxx739d&exported=True&channel=staticfile&hosted_timestamp=xxxxa345f27ac5dc1fadf469fa4e2a5ce17cxxxx8cxxxxdfddc7ca57dc3e434a