Job Information
Providence St. Joseph Health Senior IT Risk Management Analyst - Healthcare in Renton, Washington
Description This position is remote and can sit in the footprint of Providence in the states of AK, WA, OR, CA, TX and MT .Taking care of patients includes securing their data and the devices used to deliver their care. By protecting patients' data, we help ensure Providence maintains their trust while providing high-quality care. Committed to the highest cybersecurity standards, Providence Cybersecurity strives to deliver industry-leading protection of Providence's data, information, and systems, so we can all safely and effectively improve the health and quality of life in our communities. This position is an individual contributor on the Strategic Security Risk Management team, supporting enterprise and regional requirements. The Senior IT Risk Management Analyst works under minimal supervision and is expected to understand the organization's Cyber security strategy and substantially contribute to the development, maintenance and implementation of the overall system-wide Cyber security program needed for the protection of Providence St. Joseph Health. This includes managing significant bodies of work within the scope of the overall Cyber Security program. They demonstrate advanced project management security guidance and are able to track identified risks; establish a mitigation plan, work with risk owners through successful resolution. Providence caregivers are not simply valued - they're invaluable. Join our team at Enterprise Information Services and thrive in our culture of patient-focused, whole-person care built on understanding, commitment, and mutual respect. Your voice matters here, because we know that to inspire and retain the best people, we must empower them. Required qualifications: Bachelor's Degree in CS, MIS, Information Security, EE, Business or related field Or equivalent educ/experience Upon hire: Certified Information Systems Security Professional, Certified Information Systems Auditor, or one of the following - Certified Information Security Manager (CISM), Certified Business Continuity Professional (CBCP), Master Business Continuity Professional (MBCP), PCI-ISA designation (Payment Card Industry-Internal Security Assessor), or PCIP (Payment Card Industry Professional) 7 years Information Security, Healthcare preferred. Demonstrated experience working independently and in collaboration with cross-functional teams. Demonstrated experience providing in-depth analysis of complex issues which are then presented to cross-functional teams. Demonstrated experience in service delivery, process definition, and basic system development. Hands-on experience with security risk management practices. Preferred qualifications: Master's Degree in CS, MIS, Information Security, EE, Business or related field. Able to clearly communicate complex cybersecurity risks to both technical and non-technical audiences, both verbally and in written cybersecurity risk assessments. Demonstrated experience using an enterprise GRC technology like RSA Archer, ServiceNow GRC/IRM, or other similar technology. Healthcare Cybersecurity expertise: The senior information security analyst should possess healthcare cybersecurity expertise, with a breadth and depth of knowledge across security risk management and related domains. Leadership skills: They must be a proven leader and have the ability to lead significant aspects of the system-wide information security program. Thought leadership: The analyst should provide thought leadership in areas such as information security frameworks, business continuity management, reporting and metrics, security risk management, and more. Tactical planning: They should be able to translate strategy into tactical plans and coordinate the work of a cross-functional team in a lead role. Collaboration: The analyst needs to work collaboratively with various stakehold