Apply now »

Lead Information Security Analyst - IT Governance

About Providence

Providence, one of the US’s largest not-for-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, ‘Health for a better world’, Providence and its 121,000 caregivers strive to provide everyone access to affordable quality care and services.

Providence has a network of 51 hospitals, 1,000+ care clinics, senior services, supportive housing, and other health and educational services in the US.

Providence India is bringing to fruition the transformational shift of the healthcare ecosystem to Health 2.0. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation of health systems for improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.


Why Us?

  • Best In-class Benefits
  • Inclusive Leadership
  • Reimagining Healthcare
  • Competitive Pay
  • Supportive Reporting Relation

 Cyber Security is committed to appropriately protecting all information relating to its caregivers and affiliates, as well as protecting its confidential business information (including information relating to its caregivers, affiliates, and patients).

 

What will you be responsible for?

  • Conduct risk review of Security Exception request, collaborate with other security teams to review overall risk.
  • Security evaluation /Risk assessment for any new/existing products/applications/solutions/medical devices brought by 3rd Party vendors.
  • Manage risks related to the use of information technology, information security, privacy, regulatory compliance, and governance.
  • Develop & maintain infosec, data security governance policies & standards
  • Maintains integrated control framework
  • Implement higher-level security requirements and integrate security programs across disciplines
  • Conduct external security audit, attestation & Assessments, IT audit Mgmt
  • Support in achieving KPIs and metric for the Risk Management process
  • Maintain updated knowledge in the field of GRC to efficiently work on frameworks including NIST CSF, CIS Controls, HIPAA, PCIDSS, ISO27001, GDPR, SOX 404, ITIL, etc.
  • Remain current with industry best practices and monitor the legal and regulatory environment for developments.

 

What would your work week look like?

  • Holistic security evaluation for Providence supported applications/solutions and business processes to validate security posture aligning with PSJH Security Policy & Standards.
  • Serve as a subject matter expert to ensure and monitor compliance with Industry and Government rules and regulations at Enterprise/Region/Site level.
  • Conduct gap analysis and implement Standards Frameworks like ISO 27001, Privacy, GDPR, NIST CSF, HIPAA, PCIDSS, SOX etc.
  • Develop and revise Policies, Standards, Processes, and guidelines for the enterprise through change management
  • Completes security reviews, attestations requested by regulatory/business partners.
  • Support in conducting Internal audits, security risk assessments for HIPAA, PCIDSS, ISO27001, URAC etc
  • Support in building an Integrated Control framework on applicable industry standards.
  • Regularly collaborate with business leaders, application, and product owners to evaluate security needs and impacts of security decisions on business processes as well as to communicate risks
  • Promote and raise awareness of Cyber-Security programs and posture, driving change and influencing proper Cyber Security hygiene within the organization.

Who are we looking for?

  • 4-year University (Bachelor’s) degree in Computer Science, Information Security, Cyber Security or related field.
  • Minimum 4 years of experience in an Information Security/GRC role.
  • Minimum 2 years of experience in IT GRC Role/ Internal Audit Role.
  • Preferred 2 years of experience in Healthcare, Pharma or Bio-Technology organization.
  • Strong project management skills to simultaneously work on multiple projects concurrently
  • Experience with managing a GRC tool application support life cycle.
  • Strong written and oral communication skills with the ability to explain technical ideas to non-technical individuals at any level.
  • Adaptable to shifting priorities, demands, and timelines through analytical and problem-solving capabilities. Able to react to project adjustments and alterations promptly and efficiently.
  • Ability to collaborate with leaders throughout the organization.
  • Ability to effectively prioritize and execute tasks in a high-pressure environment.

Preferred knowledge of Information Security standards (ISO/IEC 27001, 27002, NIST CSF, NIST SP 800-53, CIS Controls).

Providence’s vision to create ‘Health for a Better World’ aids us to promote individuality, diversity of thought and background, and acknowledge its role in the organization’s success. This makes us committed towards equal employment opportunity regardless of race, religion or belief, color, ancestry, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law.We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.
Contact our Integrity hotline also, read our Code of Conduct.

Providence’s vision to create ‘Health for a Better World’ aids us to provide a fair and equitable workplace for all in our employment, whether temporary, part-time or full time, and to promote individuality and diversity of thought and background, and acknowledge its role in the organization’s success. This makes us committed towards equal employment opportunities, regardless of race, religion or belief, color, ancestry, disability, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law. In furtherance to our mission in building a more inclusive and equitable environment, we shall, from time to time, undertake programs to assist, uplift and empower underrepresented groups including but not limited to Women, PWD (Persons with Disabilities), LGTBQ+ (Lesbian, Gay, Transgender, Bisexual or Queer), Veterans and others. We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.

Contact our Integrity hotline also, read our Code of Conduct.

Apply now »