Compare your current skills to what this opportunity needs—we'll show you what you already have and what could strengthen your application.
Job Description
Manager -Cybersecurity Third Party Risk Sentara Hospitals - 3.7 Mobile, AL Job Details Full-time $116,729.60 - $216,777.60 a year 1 day ago Benefits 403(b) matching Paid parental leave Caregiver leave Disability insurance Health insurance Dental insurance Tuition reimbursement Paid time off Parental leave Career development plan Vision insurance 401(k) matching 403(b) Life insurance Pet insurance Qualifications Cybersecurity threat analysis Certified Information Systems Auditor Computer science Risk management compliance audits Program management Bachelor's degree in information technology Computer Science
NIST SP 800-53
Technical documentation ISO standards Program development Security risk assessment investigation CISSP Governance, risk, and compliance (GRC) software
HIPAA HITRUST 3
years Vendor compliance audits Information & network security team management CISM Health information security Analysis skills Policy & process development Bachelor's degree Team management Regulatory Frameworks (Architecture security) Vendor relationship management Security Governance (information security management) Contracts ServiceNow Full Job Description City/State Norfolk, VA Work Shift First (Days)
Overview:
Overview As a Cyber Security Third-Party Risk Manager, you will play a critical role developing, enhancing and executing the third-party risk management program including onboarding, maintenance and ongoing monitoring, and offboarding of third-party suppliers. Your primary responsibilities will include identifying and categorizing third party vendors based on risk, understanding and prioritizing the risks, establishing and enforcing key controls to mitigate the risk, perform continuous monitoring that tracks and reassesses third parties, and ensure third party contractual compliance with Sentara policy and standards. You will also be responsible for negotiating and maintaining the information security exhibit with the vendors through the contracting process. Key Responsibilities Regularly interact with all levels of management to present and discuss third-party risk management Conduct comprehensive risk assessments of third-party vendors based on risk Manage a team of assessors for performing vendor assessments and vendor contracts negotiations Analyze and prioritize risks based on their potential impact on the organization's operations, data, and reputation. Develop and streamline the third-party risk management process. Identify and assess vulnerabilities within vendor systems, networks, and applications. Collaborate with cross-functional teams, including IT, security, and compliance, to develop and implement risk mitigation strategies. Prepare detailed third-party risk assessment reports, including findings, recommendations, and mitigation plans, for presentation to management. Maintain accurate and up-to-date documentation of third-party risk assessment activities, findings, and risk treatment plans. Assist in audits and assessments to demonstrate compliance with cybersecurity standards.
Education:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (preferred) (OR) Experience in lieu of Bachelor's Degree- 7+ years of experience in cybersecurity, with at least 3 years in risk management Certification/Licensure CISSP (Certified Information Systems Security Professional) (Preferred) CISM (Certified Information Security Manager)(Preferred) CRISC (Certified in Risk and Information Systems Control)(Preferred) CISA (Certified Information Systems Auditor)(Preferred) Experience 5+ years of experience in cybersecurity, with at least 3 years in risk management with a degree (Required) 7+ years of experience in cybersecurity, with at least 3 years in risk management without a degree) (Required) Strong understanding of cybersecurity principles, risk assessment methodologies, and threat landscape analysis. 3 years' experience managing a third-party risk management program and team Proficiency in performing third-party risk assessments and negotiating contractual security language Knowledge of regulatory compliance requirements and industry standards. Excellent analytical and problem-solving skills. Effective communication and interpersonal abilities to collaborate with multidisciplinary teams. Experience in healthcare or other highly regulated industries preferred Deep understanding of cybersecurity frameworks (NIST
CSF, NIST 800-53, ISO 27001, HITRUST
) Knowledge of healthcare regulations (HIPAA, HITECH) and their technical requirements Familiarity with risk assessment methodologies and tools Understanding of security technologies, controls, and best practices Experience with GRC (Governance, Risk, and Compliance) platforms such as ServiceNOW, OneTrus Keyword, Cybersecurity Risk, TPRM Talroo - IT We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is:$116,729.60-$216,777.60. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.
Benefits:
Caring For Your Family and Your Career Medical, Dental, Vision plans Adoption, Fertility and Surrogacy Reimbursement up to $10,000 Paid Time Off and Sick Leave Paid Parental & Family Caregiver Leave Emergency Backup Care Long-Term, Short-Term Disability, and Critical Illness plans Life Insurance 401k/403B with Employer Match Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education Student Debt Pay Down - $10,000 Reimbursement for certifications and free access to complete CEUs and professional development Pet Insurance Legal Resources Plan Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met. Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission "to improve health every day," this is a tobacco-free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.
