Risk & Compliance Manager

06 Dec 2024

Vacancy expired!

POSITION: .Risk & Compliance Manager

LOCATION: Tampa FL OR Louisville KY (Currently Remote until client goes back to office)

DURATION: 6 months Contract to Hire

Skills:Hands on experience working with HI Trust, HIPAA and Sarbanes-Oxley regulations

Risk & Compliance Mgr: Manages Information Security Risk & Compliance Team. Primarily responsible for safeguarding information system assets from intentional or inadvertent disclosure, modification, disruption, or destruction. Develops, maintains, and executes security policies and standards and manages the risk management program throughout the corporate enterprise. Responsibilities • Protects computer assets by developing security strategies; directing system control development and access management, monitoring, control, and evaluation. • Manages Information Security Risk Management Program to ensure company compliance with HITRUST, HIPAA, HITECH, and SOX requirements. • Establish and install key controls on departmental communication equipment and property access. Manage processes for protecting classified, proprietary, and sensitive information. • Establishes procedures and automated processes to monitor the status of computers and networks to respond quickly to determine the cause and deal with any threat. Analyze reports generated by the monitoring system to identifytrends that might indicate a future risk. • Advises senior management by identifying critical security issues, recommending risk-reduction solutions. • Evaluate incidents and determine course of action. Report and track all incidents. • Establishes system safeguards by directing disaster preparedness development; conducting preparedness tests. • Performs other tasks as assigned. • Conducts job responsibilities in accordance with the standards set out in the Company’s Code of Business Conduct and Ethics, its policies and procedures, the Corporate Compliance Agreement, applicable federal and state laws, and applicable professional standards. • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Each essential function is required, although reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Qualifications Education/Learning Experience • Required: Bachelor’s degree in Computer Science, Information Systems or related field or 4 years’ equivalent work experience • Desired: CISSP, CISA, CISM, Technical Certifications in the field of Information Security.Work Experience • Required: 4 years’ experience managing an enterprise level information security risk management program. Experience with policy development, managing and leading security initiatives, supporting audits; monitoring, reporting, and assessing risk; and incident response. Hands on experience working with HITrust, HIPAA and Sarbanes-Oxley regulations. • Desired: Hands on experience with information security technical policy development, risk assessments, controls implementation, and security assessments.Skills/Knowledge • Required: Experience managing and leading Risk Management Programs in a mixed platform environment • Required: Working knowledge of MS office applications; Word, Excel, PowerPoint, Access and Outlook. • Required: Experience in a large enterprise environment with SOX Controls, HITRUST, HIPAA, and HITECHLicenses/Certifications • Required: Driver’s licenseBehavior Competencies • Required: Communication, Teamwork, Customer Service, Dependability, Organization and planning, Problem solving, technological orientation, Ability to travel up to 10%. Thanks,NituY&L Consulting, Inc./Sistema TechnologiesA YASH Technologies Company210 239 0319/ 210 340 0098 Extn. 201

  • ID: #23950832
  • State: Florida Tampa bay area 33601 Tampa bay area USA
  • City: Tampa bay area
  • Salary: Depends on Experience
  • Job type: Contract
  • Showed: 2021-12-06
  • Deadline: 2022-01-29
  • Category: Et cetera