Security

REQUIRED SKILLS

• CISSP, CISA, CRISC or other relevant security qualification

• A minimum of seven years of IT experience, least 5 years dedicated to IT Security Risk Management, Risk Audit/Assessment, and/or Security and/or Data Privacy Investigation least two years in a supervisory capacity.

• A strong understanding of the business impact of security tools, technologies and policies.
• Knowledge and experience working with a GRC Software tool
• Strong working knowledge of HIPAA, Joint Commission, CMS, and other regulatory legislation pertinent to the healthcare industry
• Working knowledge of information security frameworks such as NIST CSF, HITECH, ISO27001/27002, PCI DSS and COBIT
• Experience in conducting and responding to information security assessments and audits.

• Healthcare industry experience required with understanding of EMR systems and data privacy issues related to PHI

Serve as the information security liaison and subject matter expert for all relevant EMR and PHI related security risk.