Cyber Risk Program Manager

Profile

Description
GRC Analyst
needed immediately for a 6 month contract role for a large health system
Location:
Newport Beach, CA: 50% onsite and 50% remote
Comp:
Great hourly rate plus all expenses paid
Responsibilities:
Performing control assessments against corporate cybersecurity framework
Perform review of policies and supporting procedures/processes
Perform assessments of adherence to standards
Work closely with management on security practices
Assess 3rd party vendors for adherence to standards
Develop routine reports in accordance with GRC metrics. Stay on top of changes in the industry as it relates to security
Other security-related projects that may be assigned according to skills
Assist in maturing the Information Security Risk Management Program by helping to define an IS risk register which includes identifying threats and risks to the organization
Meet with business stakeholders to identify top security risks
Assist in performing IS self-assessments to ensure systems and applications are complying with corporate policies, applicable regulatory and legal requirements, and leading industry practices
Assist in developing and driving the implementation of security best practices and standards to mature the overall IS Risk Management Program which includes defining security system and application standards of control
Assist in performing Third Party Risk Assessments for new and existing vendor tools, on premise implementations, and third parties with access to the environment.
Assist in maturing the Third Party Risk Management program by defining security controls based on tiers of vendors.
Articulating identified risks to the business for remediation, mitigation and sign off.
Investigates incidents and events that include potential HIPAA and other data breaches, data leakage, brand reputational risks, malware propagation, system compromises etc.
Assist with the Data Governance Program which includes defining a Data Classification and Handling Program, identifying Data Owners, and assisting with the design and implementation of a Data Classification
Assist in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for the Data Governance Security Program and initiatives.
Assist in the management and maintenance of the enterprise wide IS Security Awareness Program which includes phishing simulations, computer based training, proactive communications on latest threats, workshops and newsletters.
Assist in developing enterprise and functional team specific presentations to promote a security mindset
Work with the security teamto ensure the Information Security team stays abreast of new regulatory, legal and/or compliance data security requirements.
What You'll Need
Bachelor's Degree, ideally in Computer Engineering, Computer Science, or Information Systems Management or equivalent work experience in the field of Cybersecurity
Possess current security certifications (e.g., Security , CISSP, CEH, SANS).
Auditing experience
Understanding of information system standards
Understanding of cybersecurity frameworks (ISO, NIST, HiTrust, COBIT, etc)
Strong documentation and communications skills

Company info

Sign Up Now - WashingtondcCrossing.com