Information Security Risk and Governance Specialist, Principal; IT Regulatory Assurance

Your Role

This role supports Stellarus within the Ascendiun Family of Companies. The Risk Management & Controls Assurance team delivers actional insights by quantifying IT and business risk to increase resilience while driving a security culture. We are seeking an Information Security Risk & Governance Specialist who will report to the Senior Manager. The successful candidate will be a highly experienced and proactive professional to lead regulatory compliance initiatives across the organization, with a focus on healthcare and technology-related standards.

This senior individual contributor will be responsible for overseeing assessments and audits related to HIPAA, PCI-DSS, SOC 2, and other applicable frameworks, ensuring the organization maintains a strong security posture and meets all regulatory obligations.

Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.

• Requires a bachelor s degree or equivalent experience
• Requires at least 10 years of prior relevant experience
• Experience in portfolio management, preferably within an Agile or SAFe environment, JIRA experience a plus
• Experience partnering with all levels of management required
• Driven, energetic, team player with superior oral and written communication skills
• Strong analytical, organizational, and project management skills.
• Requires deep understanding of IT control frameworks;
  Artificial Intelligence Risk Management Framework is strongly preferred
• Desire one or more of the following:
  CRISC (Certified in Risk and Information Systems Control),
  CISM (Certified Information Security Manager),
  CISA (Certified Information Systems Auditor),
  CISSP (Certified Information Systems Security Professional)