Manager IT Cybersecurity Risk Management

Manager IT Cybersecurity Risk Management

As a Manager within the IT Risk Management & Assurance Team, the individual will oversee day‑to‑day IT Risk Management program operations and supervise employees within the Risk Management service delivery area/s.

• Work location:
  
  Texas Health System Services
• Core work hours:
  Monday – Friday 8a‑5p;
  Remote opportunity with the ability to come on site at least once a month

• Perform Governance, Risk Management and Compliance Controls, Processes and Technology
• Provide leadership with IT GRC platform and road‑map; ensure that the product request pipeline is aligned with IT risk management strategy and govern and lead the IT GRC development efforts
• Ensure IT GRC components fully support governance, risk and compliance processes
• Create and develop requirements for reports and dashboards within the GRC system to support THR information security and risk management support needs
• Partner directly with the Privacy, Entity Directors and Compliance to support audit functions, controls monitoring efforts and oversee risk processes
• Support Texas Health entity leadership and ITS executives through the process of prioritizing security initiatives based on relevant business risk, regulatory compliance issues, financial implications and alignment with the Texas Health strategic plan
• Develop and create requirements for monthly and quarterly risk management reports and ensure timely report delivery
• Lead supported IT Risk Management functional areas and process activities with THR risk stakeholders and delegate requirements and action items to risk management functional areas
• Lead program support and reporting within the Information Security Governance Council, THR PCI workgroup, Privacy and Security Council and other steering group committees
• Ensure that all THR Information Security controls are documented and mapped to policy and technical solutions along with control effectiveness
• Delegate program function activities to support THR Information Security communication, training and awareness plans
• Assist in the development, coordination and integration of the Information Security road‑map and strategy
• Provide leadership with the THR risk management processes and procedures and align them with THR entity risks
• Provide leadership and ongoing management of the IT risk register and risk treatment plans; document and update risk treatment plans accordingly
• Report and develop metrics, measures and scorecards to measure the effectiveness of the Information Security Program and the supported program areas, including key performance indicators and key risk indicators
• Lead and delegate IT risk management activities in program support areas that leverage the THR risk analysis lifecycle and risk stratification process
• Review and update the IT risk scenario catalog to align with THR risk posture; ensure program support team members are informed and use the risk scenario catalog
• Review and update the IT risk management controls catalog; ensure control effectiveness in relation to the stratification process and risk scenarios
• Review and update IT risk management metrics and measures catalog; ensure alignment with key performance and key risk indicators
• Commission and authorize development activities, such as SharePoint, in support of the Information Security Program and alignment with the IT GRC product road‑map
• Perform audits, incident management, investigations, risk assessments
• Provide leadership and accountability in support of the THR Information Security audit plan
• Govern and lead efforts with the tracking and resolution of security incidents, issue management and exception processes
• Support audit processes and supporting documents; ensure audits are processed on time and program support team members are aware of audit tasks
• Develop accurate audit documentation used by program team members and delegate audit tasks lists
• Provide guidance and leadership on audits, incidents and assessments and ensure program team member execution
• Support and develop incident management processes; ensure incidents are coordinated and documented correctly; provide continuous feedback into…