Information Technology Governance Risk and Compliance Specialist

The position is responsible for the overall Information Security Communication and Awareness program. This position communications Information Security issues to the end user across all of McLaren Health Care. The messages must be relevant to current information security issues effecting the healthcare industry and McLaren Health Care. Also, this position manages and organizes the artifacts of the Information Security program which includes performing policy reviews and updates, FAQs and policy exceptions.

Essential Functions and Responsibilities:

• Develop and Operate the Information Security Communication and Awareness program at the corporate and hospital levels.
• Manages and operates Phishing awareness campaigns
• Provide regular email/blog "security tips" so staff improve their information security understanding and awareness
• Manages Information Security Polices and Exceptions including gathering all relevant rationale, costs/constraints, and risks.
• Keep informed on daily security news and vulnerabilities
• Organizes Information Security program artifacts.
• Other duties as assigned or when necessary to maintain efficient operations of the department and the Company as a whole.

Required:

• BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Preferred:

• Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials
• 3 months experience of common information security management frameworks, such as NIST, including 800-53 and the Cybersecurity Framework, ISO/IEC 27001, and COBIT

Equal Opportunity Employer of Minorities/Females/Disabled/Veterans