Information Technology Governance Risk and Compliance Specialist

Position Summary:

The GRC (Governance, Risk, and Compliance) specialist is responsible for supporting the development and implementation of GRC programs within MHC. They assist in conducting risk assessments, monitoring regulatory changes, and ensuring adherence to legal and internal policies. Their role involves collaborating with various departments to promote ethical practices, conducting audits, and providing recommendations to mitigate risks. Additionally, they help in developing and maintaining documentation related to compliance and risk management processes.

Essential Functions and Responsibilities As Assigned:

• Provides IT-GRC review of 'non-standard software requests' and coordinates assessment with related stakeholders
• Manages Findings and Corrective Actions assigned from internal and external assessments
• Manages communications and follow-ups with internal and external stakeholders regarding IT-GRC assessments
• Produces reports and metrics to leadership teams and committees
• Performs Service Now Whitelist Requests and coordinates results with stakeholders
• Assists in coordinating and facilitating interviews and meetings for Information Security-related assessments, such as HIPAA, external assessments, etc.

Qualifications:

Required:

• BA or BS Management Information Systems, Computer Science, or Engineering, Healthcare, Business or related field.

Preferred:

• IT and/or Security certification

Additional Information

• Schedule: Full-time
• Requisition ID: 26011741
• Daily Work Times: 8am - 4:30pm
• Hours Per Pay Period: 80
• On Call: No
• Weekends: No