IT GRC Specialist – Policy, Risk & Audit; Hybrid

Overview

Medical Mutual employees must submit their applications through MySource.

Note:
This is a hybrid role based in Dublin, OH, requiring three days per week on-site.

Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio. We provide peace of mind to more than 1.2 million members through our high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement, and individual plans.

IT Governance Risk & Compliance II

Performs the day-to-day operation of the security functions as they relate to policy administration/enforcement, project management, physical security, mainframe provisioning, and audit liaison. Works with some supervision and escalates issues to management for resolution.

• Interacts with users' requests through the corporate provision system to ensure appropriate accesses are granted to system and audit controls are in place.
• Works with all areas of the company to review projects relating to Development, Servers, and Network resources to determine and document risk associated to policy enforcement and administration.
• Participates in projects specific to security, including aligning internal and external resources to complete projects critical to Security Administration; performs routine physical security planning/review including card key access; interacts with audits and auditors to support and maintain corporate certification initiatives.
• Performs other duties as assigned.

• Bachelor’s degree in Information Technology or related field or the equivalent combination of education and experience.
• 3 years relevant IT experience.
• CRISC preferred.
• CISSP preferred.
• Intermediate understanding of current technical architecture including but not limited to server, network, application firewall.

IT Governance Risk & Compliance III

Performs the more complex day to day operation of the security functions as they relate to policy administration/enforcement, project management, physical security, mainframe provisioning, and audit liaison. Works under minimal supervision and escalates issues to management for resolution.

• Interacts with users' requests through the corporate provision system to ensure appropriate accesses are granted to system and audit controls are in place.
• Works with all areas of the company to review projects and documentation relating to Development, Servers and Network resources to determine and document risk associated to policy enforcement and administration.
• Assists project manager in projects specific to security, including aligning internal and external resources to complete projects critical to Security Administration; performs routine physical security planning/review including card key access; interacts with audits and auditors to support and maintain corporate certification initiatives.
• Performs other duties as assigned.

• Bachelor’s degree in Information Technology or related field or the equivalent combination of education and experience.
• 5 years relevant IT experience.
• CRISC Preferred.
• CISSP Preferred.
• Intermediate Understanding of current technical architecture including but not limited to server, network, application firewall.

IT Governance Risk & Compliance IV

Performs the most complex operations of the security functions as they relate to policy administration/enforcement, project management, physical security, mainframe provisioning, and audit liaison. Escalates issues to management for resolution.

• Works with all areas of the company to review projects relating to Development, Servers and Network resources to determine and document risk associated to policy enforcement and administration.
• Manages projects specific to security, including aligning internal and external resources to complete projects critical to Security Administration.
• Interacts with users' requests through the corporate provisioning system to ensure appropriate accesses are granted to system and audit controls are in place;…