[Hiring] Manager, Information Security Risk and Consulting @Trinity Health

Role Description

The Manager, Information Security Risk and Consulting, operating under the direction of the Director of Information Security Strategy and Planning, plays a critical role in executing and maturing the organization’s third-party and integrated risk management program. This includes oversight of enterprise risk assessments across commercial off-the-shelf (COTS), open source, and internally developed applications, as well as associated system integrations.

• Identifying, assessing, and prioritizing security risks.
• Ensuring appropriate controls are implemented.
• Driving continuous monitoring and risk-informed decision-making across the organization.
• Leading the development and reporting of key risk indicators (KRIs) and key performance indicators (KPIs).
• Overseeing the design and execution of scalable risk management processes.
• Building, developing, and leading a highly engaged, high-performing team of security risk professionals.

Qualifications

• Bachelor’s degree in Information Security or an equivalent combination of education and experience.
• One or more security certifications: CISSP, ISSA, CISA, CISM, CRISC, GRCP or equivalent.
• Minimum of seven (7) years of progressive experience in information services.
• Minimum of three (3) years of management experience.
• Strong knowledge of the HIPAA Security Rule and applicable industry security regulations.
• Proven knowledge of enterprise security principles and practices.
• Experience with GRC platforms (e.g., ServiceNow GRC, RSA Archer, OneTrust, or similar).
• Excellent oral and written communication skills.

Requirements

• Minimum of three (3) years of progressively responsible experience in healthcare and/or other regulated industries.
• Ability to serve as a leadership representative of the Strategy and Planning Director.
• Proficiency in performing third-party risk assessments and negotiating contractual security language.
• Ability to operate in an ambiguous and highly matrix organizational structure.
• Some knowledge of and experience with clinical application systems.

Benefits

• Rooted in our Mission and Core Values, we honor the dignity of every person.
• We are an Equal Opportunity Employer.

Physical & Mental Requirements & Working Conditions

• This position operates in a typical office environment.
• Manual dexterity is needed to operate a keyboard.
• Hearing is needed for extensive telephone and in-person communications.
• Must be capable of traveling in the course of completing project assignments.
• Frequent overtime is required to meet deadlines.