Sentara
Cybersecurity Third party Risk Manager
Sentara, Virginia Beach, Virginia, us, 23450
City/StateVirginia Beach, VAOverviewWork ShiftFirst (Days) (United States of America)Sentara Health is seeking a passionate Cybersecurity leader to join our team as Cybersecurity Third-party Risk Manager.This position is 100% Remote -
Candidates must have a current residence in one of the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, North Carolina, New Hampshire, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington (state), West Virginia, Wisconsin, Wyoming.As a Cyber Security Third-Party Risk Manager, you will play a critical role in developing, enhancing, and executing the third-party risk management program including onboarding, maintenance, ongoing monitoring, and offboarding of third-party suppliers. Your primary responsibilities will include identifying and categorizing third-party vendors based on risk, understanding and prioritizing the risks, establishing and enforcing key controls to mitigate the risk, performing continuous monitoring that tracks and reassesses third parties, and ensuring third-party contractual compliance with Sentara policy and standards.Minimum Requirements:Experience with various industry regulations and frameworks (PCI, HIPAA, ISO27001/2, NIST, HITRUST, etc.)Experience with GRC tools such as Service Now, One Trust, Archer, etc.Experience working in a highly regulated environment.Three years' experience successfully managing a third-party risk or vendor due diligence team in cybersecurity.Strong background in risk and controls, security controls, auditing, and system security.Experience negotiating IT contracting terms with vendors' legal and information security teams.Ability to express complex technical concepts in business terms.Organized and detail-oriented, able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently.Demonstrated customer focus - evaluates decisions through the eyes of the customer; builds strong customer relationships and creates processes with customer viewpoint.Strong analytical skills - strong problem-solving skills, communicates in a clear and succinct manner and effectively evaluates information/data to make decisions; anticipates obstacles and develops plans to resolve.Change oriented - actively generates process improvements; supports and drives change and confronts difficult circumstances in creative ways. Self-motivated, self-directed, flexible, and able to work under pressure and in a fast-paced team environment.Demonstrated ability to lead and motivate staff and to apply skills and techniques to solve dynamic problems.Key Responsibilities:Regularly interact with all levels of management to present and discuss third-party risk management.Conduct comprehensive risk assessments of third-party vendors based on risk.Manage a team of assessors for performing vendor assessments and vendor contracts negotiations.Analyze and prioritize risks based on their potential impact on the organization's operations, data, and reputation.Develop and streamline the third-party risk management process.Identify and assess vulnerabilities within vendor systems, networks, and applications.Collaborate with cross-functional teams, including IT, security, and compliance, to develop and implement risk mitigation strategies.Prepare detailed third-party risk assessment reports, including findings, recommendations, and mitigation plans, for presentation to management.Maintain accurate and up-to-date documentation of third-party risk assessment activities, findings, and risk treatment plans.Assist in audits and assessments to demonstrate compliance with cybersecurity standards.Qualifications and Skills:Bachelor's degree in computer science, Information Security, or experience in a related field.Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).Strong understanding of cybersecurity principles, risk assessment methodologies, and threat landscape analysis.At least 3 years' experience managing a third-party risk management program and team.Proficiency in performing third-party risk assessments and negotiating contractual security language.Knowledge of regulatory compliance requirements and industry standards.Excellent analytical and problem-solving skills.Effective communication and interpersonal abilities to collaborate with multidisciplinary teams.Attention to detail and the ability to prioritize tasks in a dynamic environment.Sentara Overview:For more than a decade, Modern Healthcare magazine has ranked Sentara Health as one of the nation's top integrated healthcare systems. That's because we are dedicated to growth, innovation, and patient safety at more than 300 sites of care in Virginia and northeastern North Carolina, including 12 acute care hospitals.Sentara Benefits:Sentara Health offers employees comprehensive health & welfare and retirement benefits (401(k)/403(b) with employer match) designed with you and your family's well-being in mind. You have a variety of options for medical, dental and vision insurance, life insurance, disability, educational assistance, student loan repayment, and voluntary benefits as well as Paid Time Off in the form of sick time, vacation time, and paid parental leave.Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria are met.Salary Range: $112,756 - $140,000
#J-18808-Ljbffr
Candidates must have a current residence in one of the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, North Carolina, New Hampshire, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington (state), West Virginia, Wisconsin, Wyoming.As a Cyber Security Third-Party Risk Manager, you will play a critical role in developing, enhancing, and executing the third-party risk management program including onboarding, maintenance, ongoing monitoring, and offboarding of third-party suppliers. Your primary responsibilities will include identifying and categorizing third-party vendors based on risk, understanding and prioritizing the risks, establishing and enforcing key controls to mitigate the risk, performing continuous monitoring that tracks and reassesses third parties, and ensuring third-party contractual compliance with Sentara policy and standards.Minimum Requirements:Experience with various industry regulations and frameworks (PCI, HIPAA, ISO27001/2, NIST, HITRUST, etc.)Experience with GRC tools such as Service Now, One Trust, Archer, etc.Experience working in a highly regulated environment.Three years' experience successfully managing a third-party risk or vendor due diligence team in cybersecurity.Strong background in risk and controls, security controls, auditing, and system security.Experience negotiating IT contracting terms with vendors' legal and information security teams.Ability to express complex technical concepts in business terms.Organized and detail-oriented, able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently.Demonstrated customer focus - evaluates decisions through the eyes of the customer; builds strong customer relationships and creates processes with customer viewpoint.Strong analytical skills - strong problem-solving skills, communicates in a clear and succinct manner and effectively evaluates information/data to make decisions; anticipates obstacles and develops plans to resolve.Change oriented - actively generates process improvements; supports and drives change and confronts difficult circumstances in creative ways. Self-motivated, self-directed, flexible, and able to work under pressure and in a fast-paced team environment.Demonstrated ability to lead and motivate staff and to apply skills and techniques to solve dynamic problems.Key Responsibilities:Regularly interact with all levels of management to present and discuss third-party risk management.Conduct comprehensive risk assessments of third-party vendors based on risk.Manage a team of assessors for performing vendor assessments and vendor contracts negotiations.Analyze and prioritize risks based on their potential impact on the organization's operations, data, and reputation.Develop and streamline the third-party risk management process.Identify and assess vulnerabilities within vendor systems, networks, and applications.Collaborate with cross-functional teams, including IT, security, and compliance, to develop and implement risk mitigation strategies.Prepare detailed third-party risk assessment reports, including findings, recommendations, and mitigation plans, for presentation to management.Maintain accurate and up-to-date documentation of third-party risk assessment activities, findings, and risk treatment plans.Assist in audits and assessments to demonstrate compliance with cybersecurity standards.Qualifications and Skills:Bachelor's degree in computer science, Information Security, or experience in a related field.Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).Strong understanding of cybersecurity principles, risk assessment methodologies, and threat landscape analysis.At least 3 years' experience managing a third-party risk management program and team.Proficiency in performing third-party risk assessments and negotiating contractual security language.Knowledge of regulatory compliance requirements and industry standards.Excellent analytical and problem-solving skills.Effective communication and interpersonal abilities to collaborate with multidisciplinary teams.Attention to detail and the ability to prioritize tasks in a dynamic environment.Sentara Overview:For more than a decade, Modern Healthcare magazine has ranked Sentara Health as one of the nation's top integrated healthcare systems. That's because we are dedicated to growth, innovation, and patient safety at more than 300 sites of care in Virginia and northeastern North Carolina, including 12 acute care hospitals.Sentara Benefits:Sentara Health offers employees comprehensive health & welfare and retirement benefits (401(k)/403(b) with employer match) designed with you and your family's well-being in mind. You have a variety of options for medical, dental and vision insurance, life insurance, disability, educational assistance, student loan repayment, and voluntary benefits as well as Paid Time Off in the form of sick time, vacation time, and paid parental leave.Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria are met.Salary Range: $112,756 - $140,000
#J-18808-Ljbffr