Senior Information Security & Cyber Risk Analyst; Compliance, CISSP, CISM, CBCP, CHPS, CISA,

Senior Information Security & Cyber Risk Analyst (Compliance, CISSP, CISM, CBCP, CHPS, CISA, HIPPA, NIST CSF) – Vancouver, WA

Location:

Vancouver, WA

Job Function:
Information Security

Date Posted: 08-20-2019

Duration:
Full‑Time Permanent position (no contracts, no corp to corp, no remote)

Salary:
Excellent Compensation with benefits + relocation + interview travel

Responsible for planning and implementation of information security and cyber risk policies, procedures, standards, and controls across Peace Health. Facilitates cyber risk management activities, security risk assessments, and information security awareness. Evaluates ongoing use and performance of information security programs and processes. Provides support for internal and external security assessments, including gathering and discussing evidence, and tracking remediation responses and activities.

• Collaborate with functional teams on cyber risks and Peace Health information security initiatives. Solicit involvement of senior management and leaders to achieve cyber risk management objectives through information sharing and collaboration to support timely resolution and risk mitigation.
• Lead and support enterprise‑wide information security and cyber risk assessments with technical and non‑technical teams.
• Proactively identify and develop recommendations to address information security and cyber risk issues and vulnerabilities by working with multiple teams including privacy, compliance, internal audit, legal, HR, information technology, etc.
• Serve as an advisor and subject‑matter expert on identified information security and cyber risk issues, projects, or any other Peace Health initiative that may have an information security implication.
• Facilitate information security committees and work groups, including scheduling, coordination, follow up, status reports and report outs.
• Perform cyber management activities, security risk assessments, security‑related investigations, and provide information security awareness. Conduct internal security and confidential information investigations and information‑usage security audits.
• Develop and maintain relevant cyber risk metrics to promote transparency across the Peace Health communities we serve. Measure, monitor and report on information security risks via security governance committees and other ad hoc meetings at Peace Health.
• Promote information security education and awareness across Peace Health.
• Perform other duties as assigned.

• Bachelor’s Degree in Information Systems, Information Technology, Computer Science, Information Security, or relevant field; OR
• Equivalent knowledge and skills obtained through a combination of education, training, and experience.

• Minimum of 5 to 7 years of experience in managing information security, cyber risk, and/or compliance related activities.
• Experience working with security frameworks such as NIST CSF and HIPAA.
• Demonstrated experience across information security and cyber risk domains.
• Health care experience preferred.
• Experience in information security investigations preferred.

• CISSP, CISM, CBCP, CHPS, CISA, or equivalent certification required.
• Must obtain one of these certifications within 12 months from hire date if not obtained at time of hire.

• Excellent project management, written and oral communication skills.
• Ability to present information in various forms such as textual, graphical and statistical.
• Ability to collect and analyze data to guide decision making while under potentially intense pressure to address security incidents.
• Demonstrated ability to work collaboratively with a broad range of constituencies and respond to their needs and collaborate effectively towards solutions.
• Ability to work on matters of high sensitivity and confidentiality with both professionalism and discretion.
• Ability to work independently with limited supervision and guidance.
• Proficient in standard software programs (Microsoft products, Windows, Outlook).

• Do you have at least 5 years of experience in managing information security, cyber risk, and/or compliance related activities?
• Do you have healthcare experience?
• Do you have experience working with security frameworks such as NIST CSF or HIPAA?
• Do you have experience in information security investigations?
• Do you have demonstrated experience across information security and cyber risk domains?