HIT- Information Security Analyst - Governance, Risk and Compliance

Information Security SpecialistResponsible for supporting information security governance, risk, and compliance. Applies strong familiarity with Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Data Security Standard (PCI DSS), National Institute of Stands and Technology (NIST), International Organization for Standardization (ISO), and other regulatory and industry frameworks to perform security assessments; write, update, and enforce policy; audit; and other related activities.Primary ResponsibilitiesAssists with risk assessments relating to information security, risk, and compliance programs, including risk identification, risk assessment, risk mitigation, compliance controls assessments, self-assessments, and action plans.Performs vendor cyber risk assessments for new and existing vendors and partnersParticipates in technical assessments for new technology being introduced to the organizationEnsures successful completion of assigned audit engagements, from start to finish, inclusive of pre-planning and wrap-up activities.Stays current on regulatory requirements and frameworks such as PCI, HIPAA, and HITRUST.Evaluates current policies and standards for inefficiencies and make improvement recommendations that enable SSM Health's security strategy.Provides guidance to internal customers regarding the practical application of information security policies and standards and regulatory requirements.Supports short and long-range risk management plans that are comprehensive, realistic, and effective in meeting goals.Interacts with coworkers, management staff, contractors, vendors, and consultants.Performs other duties as assigned.EducationBachelor's degree in computer science or related field, or equivalent years of experience and educationExperienceThree years experiencePhysical RequirementsFrequent lifting/carrying and pushing/pulling objects weighing 0-25 lbs.Frequent sitting, standing, walking, reaching, and repetitive foot/leg and hand/arm movements.Frequent use of vision and depth perception for distances near (20 inches or less) and far (20 feet or more) and to identify and distinguish colors.Frequent use of hearing and speech to share information through oral communication. Ability to hear alarms, malfunctioning machinery, etc.Frequent keyboard use/data entry.Occasional bending, stooping, kneeling, squatting, twisting, and gripping.Occasional lifting/carrying and pushing/pulling objects weighing 25-50 lbs.Rare climbing.