Providence, one of the US’s largest not-for-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, ‘Health for a better world’, Providence and its 120,000 caregivers strive to provide everyone access to affordable quality care and services.
Providence has a network of 52 hospitals, 1,000+ care clinics, senior services, supportive housing, and other health and educational services in the US.
Providence India was established to bring to fruition the transformational shift of the healthcare ecosystem to Health 2.0. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation for Improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.
Why Us?
Best In-class Benefits
Inclusive Leadership
Reimagining Healthcare
Competitive Pay
Supportive Reporting Relation
How is this team contributing to the vision of Providence?
Enterprise Information Security (EIS) is committed to appropriately protecting all information relating to its caregivers and affiliates, as well as protecting its confidential business information (including information relating to its caregivers, affiliates, and patients).
What will you be responsible for?
Assist the development, implementation and monitoring of the enterprise-wide IT Risk Management program.
Develop policies, procedures, processes, standards, and guidelines for the IT Governance Program. This will include development of an Internal Controls framework and buy in with Risk Management policies.
Assist with driving Risk management and Governance strategies for emerging technology areas.
Support the risk identification and management process across all aspects of Information Technology for a business, government agency or educational institution.
Assess the current adequacy of the security strategy, business continuity disaster recovery plans, threats to the systems, and calculate the impact of potential adverse events.
Apprise and keep up to date the executive management on the results of the risk assessment and make recommendations for mitigations.
Collaborate with stakeholders (e. g. Senior Leadership, Strategic Business Units, IT, Legal) to ensure a consistent process for identifying, assessing, responding and reporting on IT risks.
Provide and support the implementation of IT GRC initiatives globally
Maintain updated knowledge in the field of Risk management and Compliance to efficiently work on frameworks including NIST CSF, CIS Controls, GDPR, SOX 404, ITIL, etc.
Remain current with industry best practices and monitor the legal and regulatory environment for developments.
What would your work week look like?
Assist implementation of framework, policies, standards, and other security requirements.
Collaborate with business functions for effective risk management.
Conduct IT Risk Assessments to identify risks and key internal controls that mitigate identified risks.
Regularly collaborate with business leaders, application and product owners to evaluate security needs and impacts of security decisions on business processes as well as to communicate risks.
Follow up, track, analyze and report on IT Risk Assessment results.
Contribute to governance and facilitate remediation recommendations of related risks, deficiencies, gaps or issues.
Advice stakeholders with identifying compensating control alternatives where IT Risk requirements cannot be met.
Promote and raise awareness of Cyber-Security programs and posture, driving change and influencing proper Cyber Security hygiene within the organization.
Who are we looking for?
4-year University (Bachelor’s) degree in Computer Science, Information Security, Cyber Security or related field.
Minimum 4 years of experience in an Information Security/GRC role.
Minimum 2 years of experience in IT Risk Management Role.
Preferred 2 years of experience in Healthcare, Pharma or Bio-Technology organization.
Strong project management skills to simultaneously work on multiple projects concurrently
Experience with managing a GRC tool application support life cycle.
Strong written and oral communication skills with the ability to explain technical ideas to non-technical individuals at any level.
Adaptable to shifting priorities, demands, and timelines through analytical and problem-solving capabilities. Able to react to project adjustments and alterations promptly and efficiently.
Ability to collaborate with leaders throughout the organization.
Ability to effectively prioritize and execute tasks in a high-pressure environment.
Preferred knowledge of Information Security standards (ISO/IEC 27001, 27002, NIST CSF, NIST SP 800-53, CIS Controls).
At Providence, we not only acknowledge differences but also honor it. We appreciate differences related to the following factors but not limited to background, education, gender, age, generation, religious background, ability, technical skills in all our employment related opportunities.
Health is a human right
Company Description At ServiceNow, our technology makes the world work for everyone, and our people make it possible. We move...
Apply For This JobJob Description Java Java sdhfsd dscksd sdjcnnsks ccjssdc sdcs c cd sc sd c sd c v dfvlxkclvm dc sf...
Apply For This JobThe position involves teaching in below topics theoritically and practically Artificial intelligence , Cyber security Ethical Hacking Job Types: Full-time,...
Apply For This JobAbout Accenture: Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience...
Apply For This JobHighly skilled intellectual personnel, most having substantial work experience in diverse areas of Information Technology make up the SVTBS-ITS team....
Apply For This JobWe are seeking an experienced Senior US IT Recruiter to join our team. Role type: Individual Contributor Role (IC) No....
Apply For This Job