MVP Health Care
Leader, Cyber Security GRC
MVP Health Care, Rochester, New York, United States,
At MVP Health Care, we’re on a mission to create a healthier future for everyone – which requires innovative thinking and continuous improvement. To achieve this, we’re looking for a Leader, Cyber Security GRC to join #TeamMVP. If you have a passion for Cybersecurity, risk analytics, and working in a collaborative environment, this is the opportunity for you.
What’s in it for you:
Growth opportunities to uplevel your career
A people-centric culture embracing and celebrating diverse perspectives, backgrounds, and experiences within our team
Competitive compensation and comprehensive benefits focused on well-being
An opportunity to shape the future of health care by joining a team recognized as a Best Place to Work for and one of the Best Companies to Work For in New York
Qualifications you’ll bring:
Bachelor’s Degree or equivalent experience in Cybersecurity, Computer Science, Information Systems or related field.
The availability to work full-time, hybrid (remote combined with in-office), and with limited travel between MVP offices, including overnight travel.
8+ years in leadership role is highly preferred.
CISSP, CISM, PMP, or other industry relevant certifications preferred.
Possess strong analytical skills with knowledge of network and security software and tools.
Strong experience with and implementation of cybersecurity frameworks and standards, such as the NIST CSF and ISO/IEC 27001.
Curiosity to foster innovation and pave the way for growth
Humility to play as a team
Commitment to being the difference for our customers in every interaction
Your key responsibilities:
Assesses the potential impact of cybersecurity risks on critical business processes and functions.
Working with IT teams to collaboratively implement Cyber Security Policies and Standard across the environment.
Responsible for communicating organizational information through regular team meetings, one-on-one meetings, and appropriate written and interpersonal communication. Aligns cybersecurity risk management with overall business objectives.
Evaluates the cost-effectiveness of cybersecurity measures in relation to potential business losses by weighing the expense of implementing security controls against the financial and operational impact of a security incident, optimize resource allocation to achieve the maximum risk reduction for the organization
Ensures that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
Provides knowledge and expertise in government regulatory processes and documentation, including but not limited to Risk Management Approach (RMA), National Institute of Standards and Technology (NIST) standards, and policies and procedures.
Help identify, promote, and drive activities that will reduce organizational risk.
Contribute to our humble pursuit of excellence by performing various responsibilities that may arise, reflecting our collective goal of enhancing healthcare delivery and being the difference for the customer.
Where you’ll be:Position is Hybrid
Pay TransparencyAt MVP, we are committed to providing competitive employee compensation and benefits packages. The base pay range provided for this role reflects our good faith compensation estimate at the time of posting. Specific employment offers and associated compensation will be made individually based on several factors, including but not limited to geographic location; relevant experience, education, and training; and the nature of and demand for the role.
Affirmative ActionMVP is an Affirmative Action/ Equal Employment Opportunity (PDF). We recruit, employ, train, compensate, and promote without regard to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, disability, genetic information, veteran status, or any other basis, e.g., Pay Transparency (PDF), and the Know your Rights protected by applicable federal, state or local law. Any person with a disability needing special accommodations to the application process, please contact Human Resources at hr@mvphealthcare.com.#J-18808-Ljbffr
What’s in it for you:
Growth opportunities to uplevel your career
A people-centric culture embracing and celebrating diverse perspectives, backgrounds, and experiences within our team
Competitive compensation and comprehensive benefits focused on well-being
An opportunity to shape the future of health care by joining a team recognized as a Best Place to Work for and one of the Best Companies to Work For in New York
Qualifications you’ll bring:
Bachelor’s Degree or equivalent experience in Cybersecurity, Computer Science, Information Systems or related field.
The availability to work full-time, hybrid (remote combined with in-office), and with limited travel between MVP offices, including overnight travel.
8+ years in leadership role is highly preferred.
CISSP, CISM, PMP, or other industry relevant certifications preferred.
Possess strong analytical skills with knowledge of network and security software and tools.
Strong experience with and implementation of cybersecurity frameworks and standards, such as the NIST CSF and ISO/IEC 27001.
Curiosity to foster innovation and pave the way for growth
Humility to play as a team
Commitment to being the difference for our customers in every interaction
Your key responsibilities:
Assesses the potential impact of cybersecurity risks on critical business processes and functions.
Working with IT teams to collaboratively implement Cyber Security Policies and Standard across the environment.
Responsible for communicating organizational information through regular team meetings, one-on-one meetings, and appropriate written and interpersonal communication. Aligns cybersecurity risk management with overall business objectives.
Evaluates the cost-effectiveness of cybersecurity measures in relation to potential business losses by weighing the expense of implementing security controls against the financial and operational impact of a security incident, optimize resource allocation to achieve the maximum risk reduction for the organization
Ensures that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
Provides knowledge and expertise in government regulatory processes and documentation, including but not limited to Risk Management Approach (RMA), National Institute of Standards and Technology (NIST) standards, and policies and procedures.
Help identify, promote, and drive activities that will reduce organizational risk.
Contribute to our humble pursuit of excellence by performing various responsibilities that may arise, reflecting our collective goal of enhancing healthcare delivery and being the difference for the customer.
Where you’ll be:Position is Hybrid
Pay TransparencyAt MVP, we are committed to providing competitive employee compensation and benefits packages. The base pay range provided for this role reflects our good faith compensation estimate at the time of posting. Specific employment offers and associated compensation will be made individually based on several factors, including but not limited to geographic location; relevant experience, education, and training; and the nature of and demand for the role.
Affirmative ActionMVP is an Affirmative Action/ Equal Employment Opportunity (PDF). We recruit, employ, train, compensate, and promote without regard to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, disability, genetic information, veteran status, or any other basis, e.g., Pay Transparency (PDF), and the Know your Rights protected by applicable federal, state or local law. Any person with a disability needing special accommodations to the application process, please contact Human Resources at hr@mvphealthcare.com.#J-18808-Ljbffr