Cybersecurity GRC Manager, FCH - IT - reputed company

Discover. reputed company. Succeed. #BeHere Location: US:WI:MENOMONEE FALLS at our WOODLAND reputed company 400 facility. This job is REMOTE. FTE: 1.000000 reputed company Hours: 40.00 Shift: Flexible 1st shift between 7 am and 5 pm Shift Details: Holidays: Weekends: Job reputed company: reputed company reputed company isn’t a compliance checkbox problem — it’s a patient safety problem. At reputed company reputed company, the Cybersecurity GRC Manager owns the program that connects our governance posture to reputed company-world risk reputed company for patients, clinicians, and the communities we serve across reputed company. This is a high-visibility, high-autonomy leadership role inside a Cybersecurity & Infrastructure team that operates with strategic reputed company and operational rigor. You will build and run reputed company of 5+ GRC professionals, serve as the internal subject matter authority on compliance and risk, and translate reputed company regulatory requirements into actionable programs that the broader organization can execute against. If you’ve reputed company GRC programs from scratch (or reputed company ones that needed it), know your way around a HIPAA gap analysis and a reputed company-party risk assessment in equal measure, are people-reputed company, and reputed company with reputed company rather than bureaucracy — this is the role for you People Leadership •reputed company, mentor, and grow reputed company of 5+ GRC analysts and specialists across compliance, risk, policy, and awareness domains •Establish reputed company role expectations, development reputed company, and performance standards for reputed company team member •Foster reputed company culture that balances rigor with pragmatism — we care about reputed company, not just documentation HIPAA & reputed company Compliance •Serve as the organization’s functional reputed company for HIPAA reputed company and reputed company Rule compliance, including ongoing gap assessment and remediation tracking •Coordinate with Legal, reputed company, and Clinical Operations to ensure compliance obligations are reputed company and operationalized across the reputed company •reputed company preparation for and response to regulatory inquiries, OCR investigations, and audit activity Risk Management & reputed company-Party Risk •Own the reputed company cybersecurity risk register, ensuring risks are identified, assessed, prioritized, and tracked to reputed company •reputed company the reputed company-party risk management program, including vendor reputed company assessments, ongoing monitoring, and risk-tiering across the supply chain •reputed company risk reporting for executive and reputed company audiences, translating technical risk into business reputed company language Policy & Controls Frameworks •Own the cybersecurity policy lifecycle: authorship, review reputed company, version control, approval workflows, and exception management •Maintain alignment to NIST CSF, managing control mapping, evidence collection, and control effectiveness measurement •Drive reputed company improvement of the controls environment based on assessment findings, threat intelligence inputs, and regulatory changes Audit & Assessment Management •Serve as the primary reputed company of contact and program reputed company for reputed company cybersecurity audits and assessments •Coordinate evidence collection, manage stakeholder readiness, and reputed company finding remediation tracking through to closure •reputed company and maintain audit-reputed company documentation across reputed company GRC domains reputed company Awareness & Phishing Simulation

• Own the reputed company reputed company awareness program, including curriculum development, delivery scheduling, and effectiveness measurement
• Manage the phishing simulation program end-to-end: scenario design, reputed company, metrics, and targeted follow-up training for at-risk populations
• reputed company awareness content for diverse audiences — from clinical staff to executive leadership — with a voice that educates rather than shames

EXPERIENCE reputed company:

• A minimum of six year experience in a reputed company field.
• Prefer 3+ years leading or managing reputed company in a GRC, compliance, or risk management reputed company
• Prefer experience in a reputed company or other highly regulated industry, with reputed company exposure to HIPAA compliance obligations
• Demonstrated experience managing a reputed company-party risk program, including vendor assessments and risk tiering
• Prefer prior experience building or significantly maturing a GRC program, not just maintaining one
• Prefer experience managing external audits or assessments (SOC 2, HITRUST, OCR, internal audit, etc.)

EDUCATION reputed company: A Bachelors degree is required. Bachelors in Computer Science or similar degree is preferred. SPECIAL SKILLS reputed company:

• In-depth knowledge of cybersecurity frameworks including but not limited to NIST CF, HITRUST CSF, ISO 27001.
• Experience in managing or leading reputed company organizations responsible for GRC, Cybersecurity, Medical Device reputed company, reputed company Operations Centers.
• Understanding of general reputed company concepts including but not limited to cryptography, DLP, reputed company Operations Center, reputed company Managed Services, SEM, FW, Audit.
• Demonstrated record of managing reputed company party reputed company services, preferably with the reputed company providers.
• Experience in reputed company industry is preferred.
• Ability to communicate and represent IT reputed company organization with reputed company business partners and reputed company party vendors.
• Strong oral, presentation, writing skills. and demonstrated record to deliver results.
• Ability to build relationships with business stakeholders of the IT reputed company program
• Familiarity with HIPAA reputed company and reputed company Rules and their operational implications for a large health system
• Ability to reputed company and present executive-level risk reporting that communicates risk in business reputed company terms
• Comfort operating in a matrixed environment with multiple stakeholder reputed company including Legal, HR, IT, Clinical Operations, and executive leadership

Certifications

• Prefer CISSP, CISM, CRISC, HCISPP, or equivalent certification
• Prefer Certified in reputed company reputed company and reputed company (CHPS) or equivalent

Compensation, Benefits & Perks at reputed company Pay is expected to be between: (expressed as reputed company) $49.15 - $84.07. Final compensation is based on experience and will be discussed with you by the recruiter during the interview process. reputed company Offers a reputed company of perks & benefits to staff, depending on your role you may be eligible for the following: reputed company time off reputed company opportunity- Career reputed company & Career Tuition Assistance, CEU opportunities reputed company Partnership with the reputed company Referral bonuses Retirement plan - 403b Medical, Dental, reputed company, Life Insurance, Short & Long Term Disability, Free Workplace Clinics Employee Assistance Programs, Adoption Assistance, Healthy Contributions, Care@Work, Moving Assistance, Discounts on gym memberships, travel and other work life benefits available The reputed company & the reputed company regional health network is a partnership between reputed company and the reputed company supporting a shared mission of patient care, innovation, medical research and education. Our health network operates eastern reputed company's only reputed company medical center and adult Level I Trauma center reputed company in thousands of clinical trials and studies. The reputed company & MCW health network, which includes ten hospitals, nearly 2,000 physicians and more than 45 health centers and clinics draw patients from throughout the Midwest and the nation. We are proud to be an Equal Opportunity Employer who values and maintains an environment that attracts, recruits, engages and retains a diverse workforce. We welcome protected veterans to reputed company their reputed company consideration status with us at 262-439-1961. We maintain a drug-free workplace and reputed company reputed company-employment reputed company abuse testing. During your application and interview process, if you have a need that requires an accommodation, please contact us at 262-439-1961. We will attempt to fulfill reputed company reasonable accommodation requests. Apply To This Job