Information Technology Governance Risk and Compliance Specialist

The McLaren system includes 12 hospitals across the state, ambulatory surgery centers, imaging centers, a 730-member employed primary and specialty care physician network, commercial and Medicaid HMOs covering more than 242,000 Michigan lives, home health, infusion and hospice providers, pharmacy services, a clinical laboratory network, and a wholly owned medical malpractice insurance company. McLaren operates Michigan’s largest network of cancer centers and providers, anchored by the Karmanos Cancer Institute, a National Cancer Institute-designated comprehensive cancer center.

McLaren has 20,000 full-, part-time and contracted employees and more than 93,000 network providers throughout Michigan.

The position is responsible for the overall Information Security Communication and Awareness program. This position communications Information Security issues to the end user across all of McLaren Health Care. The messages must be relevant to current information security issues effecting the healthcare industry and McLaren Health Care. Also, this position manages and organizes the artifacts of the Information Security program which includes performing policy reviews and updates, FAQs and policy exceptions.

Develop and Operate the Information Security Communication and Awareness program at the corporate and hospital levels.

Manages and operates Phishing awareness campaigns

Provide regular email/blog "security tips" so staff improve their information security understanding and awareness

Manages Information Security Polices and Exceptions including gathering all relevant rationale, costs/constraints, and risks.

Keep informed on daily security news and vulnerabilities

Organizes Information Security program artifacts.

Other duties as assigned or when necessary to maintain efficient operations of the department and the Company as a whole.

BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

3 months experience of common information security management frameworks, such as NIST, including 800-53 and the Cybersecurity Framework, ISO/IEC 27001, and COBIT

• Schedule:
  
  Full-time
• Daily Work Times: 8am - 4:30pm
• On Call:
  No

McLaren Health Care is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identification, age, sex, marital status, national origin, disability, genetic information, height or weight, protected veteran or other classification protected by law.

Create and manage profiles for future opportunities.

McLaren Health Care is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identification, age, sex, marital status,national origin, disability, genetic information, height or weight, protected veteran or other classification protected by law.