Information Technology Governance Risk and Compliance Specialist

McLaren Health Care • Grand Blanc, MI

10h

About The Position

The Information Technology Governance Risk and Compliance Specialist is responsible for McLaren Health Care’s Information Security Communication and Awareness program. The position communicates information security issues to end users across McLaren Health Care, with messages relevant to current security issues affecting the healthcare industry and McLaren Health Care. It also manages and organizes Information Security program artifacts, including policy reviews and updates, FAQs, and policy exceptions.

Requirements

• Bachelor of Arts or Bachelor of Science in Management Information Systems, Computer Science, Engineering, Healthcare, Business, or a related field.

Nice To Haves

• Professional security management certification, such as CISSP, CISM, CISA, or a similar credential.
• Three months of experience with common information security management frameworks, such as NIST (including 800-53 and the Cybersecurity Framework), ISO/IEC 27001, and COBIT.

Responsibilities

• Develop and operate the Information Security Communication and Awareness program at corporate and hospital levels.
• Manage and operate phishing awareness campaigns.
• Provide regular email or blog security tips to improve staff understanding and awareness of information security.
• Manage Information Security policies and exceptions, including gathering relevant rationale, costs or constraints, and risks.
• Keep informed about daily security news and vulnerabilities.
• Organize Information Security program artifacts.
• Perform other duties as assigned or necessary to maintain efficient department and company operations.

What This Job Offers

• Job Type: Full-time