Governance Risk and Compliance Specialist

Work Shift

Day

Work Day(s):
Monday-Friday

Shift Start Time: 8:00 AM

Shift End Time: 5:00 PM

Worker Sub-Type:
Regular

Serves as subject matter expert in the area of analyzing risks while having an understanding of multiple security platforms and layers, including vulnerability management, intrusion detection/prevention, incident response, log correlation and management, operating systems, and identity and access management. Helps manage information security risks to an acceptable level.

• 5 years of experience in any combination of network security protocols/methodologies, information security and information technology controls, National Institute of Standards and Technology and International Organization for Standardization frameworks, security penetration and vulnerability assessments, network/systems administration.

• 2 years of experience in any combination of information technology, computer operations, database management system security.
• Experience in a healthcare setting.

• Bachelor's degree in Computer Sciences, Information Technology, related field, or equivalent experience.

• Certified in Risk and Information Systems Control (CRISC), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Windows Security Administrator (GCWN), GIAC Certified Enterprise Defender (GCED), GIAC Security Essentials Certified (GSEC), Certified Information Systems Security Professional (CISSP), or equivalent experience.

• Strong knowledge of accepted information systems and technology security regulations.
• Solid knowledge of Health Insurance Portability and Accountability Act, Joint Commission, and other information technology security governing bodies.
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s).
• Well-developed organizational, written communication, and analytical skills.
• Strong interpersonal skills to interact positively and productively with teams across organizational lines, including administrative/executive staff and patient care systems users.
• Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities.

• Ensures integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies through performance of formal risk assessments, policy and governance, and internal threat analysis.
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance.
• Serves as expert on matters related to enterprise network security architecture, design, implementation, and ongoing support for network security devices.
• Provides feedback concerning areas for development and accomplishments.
• Works closely with Security Architect, network infrastructure team, and business units to provide security planning and technical support.
• Develops, updates, and assists in maintaining information security awareness training documentation and materials.
• Facilitates training sessions on or about information security and ensures consistent application of company policy and procedure guidelines.
• Prepares incident reports of analysis methodology and results and assists with implementation of counter-measures or mitigating controls.
• Provides technical expertise for administration of security management tools.
• Develops business cases and conduct presentations to senior information technology leadership of proposed security products and studies.
• Analyzes and documents information for product and process improvements and analyzes product rejections to create and implement effective corrective and preventive actions.
• Works independently or as lead on projects of medium to high complexity.
• Maintains current knowledge of relevant technology as assigned.

Children’s Healthcare of Atlanta is an equal opportunity employer committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, sex, religion, national origin, citizenship, age, veteran status, disability or any other characteristic covered by applicable law.

1575 Northeast Expy NE

Information Security