Core Responsibilities:

• Conduct comprehensive risk assessments to identify potential security vulnerabilities and threats. This involves evaluating existing security measures, analyzing system configurations, and assessing potential impact and likelihood or risk.

• Develop strategies and recommendations to minimize security risks based on risk assessment findings. This may involve working with business and technology stakeholders to implement additional security controls, updating policies, and procedures, or providing training and awareness to employees.

• Develop methods to monitor and measure risk and report on business impact to key stakeholders and leadership teams.

• Work with risk owners to triage new risks by leading them through the risk intake and risk response process and formally recording all new risks in the risk management system.

• Collaborate with cross-functional teams, such as IT, legal, compliance, and senior management, to ensure a holistic approach to security risk management.

• Communicate effectively to educate and raise awareness about security risks and promote a culture of security throughout the organization.

• Oversee the execution of the Third-Party Risk Management (TPRM) program.

• Perform focused third-party risk assessments on existing and new vendors.

• Communicate risk assessment findings to vendor relationship managers.

• Develop and monitor vendor remediation actions, mitigation, and contingency plans when risks or events are identified.

Minimum Qualifications:

• 3+ years of work experience in third party risk management, information security, risk management and/or IT audit role

• BA or equivalent, relevant experience

• 3+ years of experience with regulatory compliance

• Previous experience with the Health Insurance Portability and Accountability Act (HIPAA)

• Knowledge of the NIST Risk Management Framework (RMF) standards.