Hipaa Security Rule

Hipaa Security Rule Cybersecurity Jobs

3 jobs found

Today

Cybersecurity Manager

Confluence Health Wenatchee, WA

Wenatchee, WA

Today

$55 - $96/hr Full time Manager Cloud Platforms Data Security

Apply Now

Job Description

Confluence Health is hiring a Cybersecurity Manager for an onsite role in Wenatchee, WA.

Responsibilities

Supervise assigned staff across cybersecurity, security operations/identity, and network security engineering, including setting expectations, assigning work, reviewing results, coaching and feedback, performance management, and cross-training/succession readiness.
Translate security priorities set by the Information Security Officer, Director into team plans, service objectives, assignments, schedules, and measurable outcomes.
Balance security execution across operational support, incident response, projects, maintenance, compliance activities, and technical debt using risk and business impact.
Own security operations for daily monitoring, alert triage, investigations, containment, remediation, and recovery coordination, including vulnerability management and operational use of security platforms.
Ensure process rigor for security activity so work is timely, documented, repeatable, and escalated via approved procedures.
Oversee identity and access workflows, including account lifecycle support, authentication controls, privileged access processes, access reviews, exception handling, and audit evidence.
Partner across teams (Application, HR, Compliance, Privacy, and IT) to strengthen access governance and reduce inappropriate access risk.
Manage network security operations and lifecycle management for enterprise network and services: WAN/LAN, wireless, firewalls, segmentation, secure remote access, network access control, load balancing, monitoring, and connectivity dependencies.
Maintain resiliency and change discipline with documentation, effective escalation during outages or security events, and operational readiness.
Serve as incident escalation point for cybersecurity incidents, identity-related events, and high-impact network operational issues, coordinating technical resources, communications, evidence preservation, remediation, recovery, and after-action improvements.
Drive risk escalation for material risk and required decisions to the Information Security Officer, Director.
Run intake and prioritization for incidents, requests, problems, and recurring work, including queue reviews, dashboards, documentation review, and addressing barriers and trends impacting customers.
Ensure platform operations for assigned security and network platforms: maintained, monitored, documented, supported, and operated in line with architecture, change management, access, backup, recovery, and configuration standards.
Lead or support initiatives for security and network improvements, including implementation planning, resource coordination, testing, operational acceptance, documentation, and transition to support.
Produce management visibility through meaningful team metrics, service dashboards, risk and remediation tracking, initiative status reporting, and trend analysis aligned with executive visibility through the Information Security Officer, Director.
Support compliance obligations by implementing and monitoring operational practices supporting HIPAA Security Rule requirements and organizational/audit commitments (including DNV-related expectations), coordinating evidence collection and remediation tracking without assuming the designated HIPAA Security Officer function.
Manage vendors for assigned relationships, support performance, licensing, renewals, quotes, and assigned contracts; assist with capital and operating budget development, forecasting, prioritization, and business justification.
Maintain cross-functional relationships with IT, Clinical Applications, Privacy, Compliance, Legal, Human Resources, Project Management, business leaders, and vendors.
Keep documentation current, including procedures, runbooks, standards, inventories, architecture references, escalation paths, and knowledge articles; recommend policy/control improvements to the Information Security Officer, Director.
Stay current on cybersecurity threats, healthcare security requirements, identity and access practices, network security, and leadership methods; participate in after-hours support/on-call escalation as assigned.
Other duties as assigned.

Requirements

Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field (or an equivalent combination of education and relevant experience).
6+ years progressive experience in cybersecurity, information security, identity/access security, network security, or related enterprise technology disciplines, plus 2+ years of formal leadership, supervision, or management experience within technical or security teams.
Two or more certifications such as CISSP, CISM, Security+, CCNP Security, GIAC, CRISC, or a role-aligned cloud, identity, network, or vendor certification.
Experience in healthcare or another highly regulated environment.
Experience with Microsoft security technologies, SIEM/SOAR, endpoint security, vulnerability/exposure management, firewalls, network access control, privileged access management, identity governance, cloud security, and secure remote access.

Technologies

Microsoft security technologies
SIEM/SOAR
Endpoint security
Vulnerability/exposure management
Firewalls
Network access control
Privileged access management
Identity governance
Cloud security
Secure remote access
HIPAA Security Rule
DNV

Benefits

Medical, Dental & Vision Insurance
Flexible Spending Accounts & Health Saving Accounts
Paid Time Off
Generous Retirement Plans
Life Insurance
Long-Term Disability
Gym Membership Discount
Tuition Reimbursement
Employee Assistance Program
Adoption Assistance
Shift Differential

Other Details

Reports to: Information Security Officer, Director
Location: Wenatchee, WA (onsite)
Compensation: USD 55 - 96 per hourly
FLSA: Exempt
Hourly/Salary: Salary

Working Conditions

Substantial independence and discretion in a fast-paced healthcare technology environment.
May require flexible hours, after-hours escalation rotation participation, and response to cybersecurity incidents, technology outages, planned maintenance, or urgent operational needs.
Handles confidential, security-sensitive, and potentially regulated information; follows organizational privacy, security, records, and acceptable-use requirements.

Physical/Sensory Demands for This Position

Walking: F
Sitting/Standing: F
Reaching: Shoulder Height: O
Reaching: Above shoulder height: O
Reaching: Below shoulder height: O
Climbing: O
Pulling/Pushing: 25 pounds or less: O
Pulling/Pushing: 25 pounds to 50 pounds: O
Pulling/Pushing: Over 50 pounds: O
Lifting: 25 pounds or less: O
Lifting: 25 pounds to 50 pounds: O
Lifting: Over 50 pounds: O
Carrying: 25 pounds or less: O
Carrying: 25 pounds to 50 pounds: O
Carrying: Over 50 pounds: O
Crawling/Kneeling: O
Bending/Stooping/Crouching: O
Twisting/Turning: O
Repetitive Movement: F

Physical Exposures for This Position

Unprotected Heights: No
Heat: No
Cold: No
Mechanical Hazards: No
Hazardous Substances: No
Blood Borne Pathogens Exposure Potential: No
Lighting: Yes
Noise: Yes
Ionizing/Non-Ionizing Radiation: No
Infectious Diseases: No

View full job page →

20d ago

Cybersecurity Governance, Risk, & Compliance Manager

Erlanger Health System Chattanooga, TN

Chattanooga, TN

20d ago

Full time Manager Ai Security Cloud Risk Management

Apply Now

Job Description

The Cybersecurity Governance, Risk, & Compliance (GRC) Manager will build and sustain Erlanger Health System’s cybersecurity governance and compliance capabilities. This hybrid role focuses on aligning policy, risk, and control practices with healthcare and cybersecurity requirements, including NIST CSF 2.0 Govern and the HIPAA Security Rule.

Role Overview

The GRC Manager designs, implements, and maintains Erlanger Health System’s cybersecurity policy framework, compliance programs, and governance processes. The position ensures organizational alignment with NIST CSF 2.0 Govern function, the HIPAA Security Rule, and other emerging standards relevant to AI security, post-quantum cryptography, and cloud security.

Key Responsibilities

Design, implement, and maintain the cybersecurity policy framework, compliance programs, and governance processes to support alignment with NIST CSF 2.0 Govern function and healthcare regulations, including the HIPAA Security Rule.
Ensure alignment with emerging standards for AI security (such as NIST AI RMF), post-quantum cryptography, and cloud security frameworks (such as CSA CCM).
Identify and address risks associated with evolving technologies, including AI-integrated systems, quantum computing, and cloud-based infrastructures, with a focus on regulatory compliance and organizational resilience.
Apply expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF, along with familiarity with NIST AI Risk Management Framework (RMF), NIST PQC post-quantum cryptography standards, and cloud security frameworks such as AWS Well-Architected Security, Azure Security Center, or CSA STAR.
Translate complex compliance and risk topics, including those related to AI, quantum, and cloud domains, for both technical and non-technical stakeholders.
Operate effectively in dynamic environments, including occasional after-hours support for compliance-related incidents or audits.
Perform duties in a hybrid/on-site capacity as required, with variability in days and hours.

Required Qualifications

Bachelor’s degree in information security, compliance, or a related field.
7+ years of experience in cybersecurity governance and compliance, preferably within a healthcare system, with exposure to AI-integrated compliance, quantum security concepts, or cloud-based governance.
Expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF.
Familiarity with NIST AI Risk Management Framework (RMF), post-quantum cryptography standards (such as NIST PQC), and cloud security frameworks including AWS Well-Architected Security, Azure Security Center, or CSA STAR.
Demonstrated ability to communicate complex compliance and risk concepts to both technical and non-technical audiences.

Education

Required: Bachelor’s degree in information security, compliance, or a related field.
Preferred: Master’s degree, with coursework or emphasis on AI, quantum computing, or cloud technologies.

Experience

Required: 7+ years of experience in cybersecurity governance and compliance, preferably in a healthcare system, with exposure to AI-integrated compliance, quantum security concepts, or cloud-based governance.

Department Reporting Line

This role reports to the Chief Information Security Officer.

Relevant Technologies and Frameworks

NIST CSF 2.0
HIPAA Security Rule
HITRUST CSF
NIST AI Risk Management Framework (RMF)
NIST AI RMF
NIST PQC and NIST PQC standards
CSA CCM
AWS Well-Architected Security
Azure Security Center
CSA STAR

View full job page →

2mo ago

Cybersecurity Consultant-Japanese Bilingual

PASONA N A, INC. New York, NY

New York, NY

2mo ago Closed

$120k - $150k/yr Full time Cis Controls Cloud Platforms Cmmc Controls

This position is no longer accepting applications (closed Aug 9, 2026).

Job Description

The Cybersecurity Consultant role supports Japanese multinational organizations operating in North America by assessing cyber risk, strengthening governance, and shaping strategic roadmaps. The position may function as a Virtual Chief Information Security Officer for select clients.

Key Responsibilities

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps that align with organizational objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity initiatives
Conduct cybersecurity risk assessments and control evaluations
Perform readiness assessments and gap analyses against frameworks and regulatory requirements such as NIST CSF, ISO 27001/27002, NYDFS Part 500, HIPAA Security Rule, CMMC, SOC 2, and CIS Controls
Develop remediation plans and implementation recommendations
Serve as a trusted cybersecurity advisor for organizations without dedicated security leadership
Participate in executive meetings and annual cybersecurity program reviews
Support governance and strategic decision-making processes
Review and recommend target-state architectures across IAM, SSO, MFA, Network Security, Endpoint Protection, Cloud Security, and Data Protection & DLP
Align cybersecurity programs with modernization and digital transformation initiatives
Provide executive-level post-incident guidance and recommendations
Facilitate root-cause analyses and lessons-learned sessions
Assist with regulatory notification considerations and remediation planning
Build long-term trusted relationships with executive stakeholders
Present findings and recommendations to senior leadership teams and boards
Coordinate with delivery, engineering, and customer success teams to ensure effective execution of advisory recommendations
Contribute to methodology development, service innovation, and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and cybersecurity awareness programs

Required Qualifications

Minimum 10 years of experience in cybersecurity, information risk management, IT governance, security consulting, or related advisory disciplines
Minimum 5 years in a senior consulting, cybersecurity leadership, risk advisory, governance, or Virtual CISO role
Experience advising executive stakeholders including CIOs, CISOs, Boards, Audit Committees, and Executive Leadership Teams
Working knowledge of NIST CSF
Working knowledge of ISO 27001/27002
Working knowledge of NYDFS Part 500
Working knowledge of HIPAA Security Rule
Working knowledge of CMMC
Working knowledge of CIS Controls
Understanding of enterprise cybersecurity architecture and technology domains, including IAM, SSO, MFA
Cloud Security experience (AWS, Azure, Microsoft 365)
Network Security, Endpoint Security
Vulnerability Management and Data Protection

Technologies

AWS
Azure
Microsoft 365
NIST Cybersecurity Framework (CSF)
ISO 27001/27002
NYDFS Part 500
HIPAA Security Rule
CMMC
CIS Controls
SOC 2
Identity and Access Management (IAM)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Cloud Security
Data Protection
Data Loss Prevention (DLP)
Vulnerability Management
Network Security
Endpoint Security

Benefits

Benefits package
Visa and relocation support

Location

New York, NY (Hybrid)
Hybrid work arrangement with approximately 2–3 days per week in the office
Periodic travel within the United States for customer engagements, with occasional international travel as needed

Language Requirements

Japanese: Native or Business Professional Proficiency (Required)
English: Business Professional Proficiency (Strongly Preferred)

Position Overview

We seek an experienced Senior Cybersecurity Consultant to join a growing advisory practice supporting Japanese multinational enterprises across North America. The role acts as a trusted adviser to executive leadership, helping clients assess risk, fortify governance programs, enhance regulatory readiness, and build strategic roadmaps. The successful candidate will engage directly with CIOs, CISOs, IT Directors, General Managers, Executive Committees, and Board Members to deliver actionable recommendations that align security initiatives with business goals. The ideal candidate combines business acumen with deep cybersecurity expertise, regulatory knowledge, and strong communication skills. This position may also function as a Virtual CISO for select engagements.

Key Responsibilities (Expanded)

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps aligned with objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity
Conduct risk assessments and control evaluations
Perform readiness and gap analyses against leading frameworks and regulations
Develop remediation plans and implementation recommendations
Act as a trusted advisor for organizations lacking security leadership
Participate in executive meetings and annual program reviews
Support governance and strategic decision-making
Review target-state security architectures across IAM, SSO, MFA, and related domains
Align programs with modernization and digital transformation
Provide post-incident guidance and root-cause analysis facilitation
Assist with regulatory notification considerations and remediation planning
Build long-term executive relationships and present findings to boards
Coordinate with delivery, engineering, and customer success teams for execution
Contribute to methodology development and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and awareness programs

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, or related field
Master's degree preferred

Certifications

CISSP
CISM
CISA
CRISC
CGEIT
Equivalent cybersecurity certification

Preferred Qualifications

Experience with Japanese multinational corporations in North America
Background in financial services, manufacturing, insurance, telecommunications, or regulated industries
Experience supporting governance, risk management, internal controls, and compliance programs
Familiarity with security operations, incident response, threat intelligence, cloud security, or security architecture
Cloud certifications such as AWS, Azure, or Microsoft Security
demonstrated thought leadership through publications or industry involvement

How to Apply

Email your resume to xjiang@pasona.com

View full job page →

Hipaa Security Rule Cybersecurity Jobs

Cybersecurity Manager

Cybersecurity Governance, Risk, & Compliance Manager

Cybersecurity Consultant-Japanese Bilingual

Get Hipaa Security Rule Cybersecurity Jobs alerts