Manager, IT Risk Assurance & Compliance

4 days ago Be among the first 25 applicants

Who We Are
Point
32

Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point
32

Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are.

We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

Job Summary

The Manager, Cyber & Information Security, will report into the Director, Cyber & Information Security and is responsible for leading a team of staff and analyzing the information security environment for Point
32

Health and developing security measures to safeguard the confidentiality, integrity, and availability of information. The manager will work closely with other managers/directors across Cyber & Information Security, as well as partners across IT, and the broader Point
32

Health business. Will be responsible for having expertise and leading adoption of cyber-security systems.

• Manage staff including supervision, assigning work, professional development, performance evaluation, recruitment, and coaching/mentoring.
• Provide coaching, constructive feedback and direction to staff to ensure successful achievement of projects and initiatives.
• Monitor staff workloads to assist in resource allocation and ensure deliverable dates are met.
• Develop procedures and guidelines to support consistent delivery of services.
• Consult with other Cyber & Information Security colleagues to continuously evaluate and implement security solutions.
• Communicate potential security concerns/exposures to appropriate leadership and lead adoption of cyber-security systems.
• Coordinate and collaborate with business organizations and other IT groups to ensure quality solutions are delivered within project timelines.
• Engage in ongoing communications with peers in the IT groups as well as the various business groups to ensure enterprise-wide understanding of security goals, solicit feedback and foster cooperation.
• Maintain up-to-date knowledge of the cyber and information security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Oversee the deployment, integration and configuration of all new security solutions and enhancements to existing security solutions in accordance with industry-leading practices and the enterprise’s security documents.
• Ensure adequate and effective technical and non-technical controls exist to meet current and future security compliance requirements found in local, state, and federal laws and regulations.
• Identify/recommend tools, processes, software, and hardware to improve or replace current security infrastructure practices, services, or technologies to meet future requirements.
• Other duties and projects as assigned.

Education

• Required:
  
  Bachelor’s degree in cyber security, Computer Science, Risk Management, or related field; preferred or equivalent experience
• Preferred:
  Master’s degree

Experience

• Required:
  
  5-7 years of professional experience
• Preferred: 5-7 years’ experience in cyber security initiatives including IT security, risk, compliance, audit, threat detection, data privacy, etc.
• Understanding of cyber-security and IT systems including web access management, vulnerability management, security design, and operating system environments
• Experience managing a team and/or coaching team members
• Experience developing policies/procedures for security processes

Skill Requirements

• Ability to lead a team including mentoring, coaching, and motivating; opportunity to learn and grow at Point
  32
  
  Health
• Proven track…