Senior Cybersecurity Policy & Compliance Analyst (Remote Available)

Vanderbilt University Medical Center•Nashville, TN

1d•Remote

About The Position

The Senior Cybersecurity Analyst assists in the creation, coordination and execution of policy & privacy/security compliance programs across VUMC. The Senior Cybersecurity Analyst assists leadership in supporting these compliance programs that are expected to experience significant change, expansion or evolution over time. This role is available for remote work from most parts of the US and with this role we are targeting a salary range of $115k - $145k.

Requirements

Bachelor’s degree in related field or equivalent experience.
Experience writing/editing policies and procedures.
Experience managing compliance documentation, including but not limited to committee charters, confidentiality agreements and annual attestations.
Excellent organizational, analytical, and time management skills.
Effective interpersonal, writing, and communications skills required.
Experience with US and international privacy / security-related regulatory frameworks (HIPAA/HITECH, GDPR, etc…).
Ability to work independently with minimal supervision.
Experienced with business process development / improvement.
Ability to manage multiple competing priorities within the context of a complex, multi-faceted organization.
At least 3 years experience in cybersecurity.
Information Security Related Professional Qualification (e.g., CISSP, CISA, Security+, CEH, GSEC, etc.)

Responsibilities

Assist in conducting cybersecurity compliance reviews and tracking compliance gaps to remediation.
Assist in development/review of cybersecurity policies and procedures.
Consult with workforce members on regulatory and policy requirements.
Assist in conducting cybersecurity control compliance reviews for international travelers.
Act as cybersecurity compliance representative on cross-functional work teams.
Assist with project/organizational risk assessments.
Develop, implement and monitor security compliance work plans for the organization.
Develop/improve processes for evaluating/documenting security compliance.
Assist in responding to third party audits (payers, research partners, vendors, etc.).
Assist in responding to internal audits (assist in managing and completing Management Action Plans (MAPs)).
Assist in developing cybersecurity training initiatives.
Prepare regular reports for executive review.
Maintain an in-depth knowledge of privacy/security-related regulatory frameworks such as HIPAA, GDPR and provide timely information regarding important regulatory changes to operational leaders.