Manager IT-Cybersecurity Compliance

Benefits

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Reimbursement for certifications and free access to complete CEUs and professional development
• Pet Insurance
• Legal Resources Plan
• Annual discretionary bonus eligibility based on system eligibility criteria

Overview

The Manager – Cyber Security Compliance at Sentara Hospitals leads the team responsible for establishing and maintaining the cyber security compliance program for Sentara Healthcare. This onsite role in Fostoria, KS directs strategy, readiness assessments, and governance across regulatory, industry, and contractual requirements, with reporting to the Director of GRC to ensure alignment with Sentara Healthcare expectations.

Responsibilities

• Lead a team of cyber security compliance professionals to measure adherence to a broad range of internal and external control requirements
• Own cyber security compliance strategy, programs and related initiatives including regulatory audits, compliance management, controls testing, medical device security, metrics, and risk and performance indicators
• Understand key security and compliance frameworks including HIPAA, HICP 405(d), NIST800-171, SOC2, ISO27001, and applicable laws
• Manage compliance initiatives to ensure control effectiveness with laws, regulations, and internal policies
• Monitor activities of assigned IT areas to ensure control assurance of internal policies and standards
• Participate in development and implementation of new business initiatives involving compliance to support required functionality
• Provide guidance to business functions on compliance and security matters and lead investigations
• Coordinate audit-related tasks to ensure readiness for audit testing and facilitate corrective actions for ownership and timely remediation
• Initiate improvement activities to reduce risk, ensure compliance, lower cost, and improve IT process quality
• Refine and revise existing policies

Requirements

• 5+ years in a cyber security management role, preferably in Governance, Risk or Compliance with a Bachelor's Degree (Required)
• 7+ years in a cyber security management role, preferably in Governance, Risk or Compliance without a Bachelor's Degree (Required)

Technologies

• Service Now
• Archer

Certifications / Licensure

• CISSP (Preferred)
• CISM (Preferred)
• CRISC (Preferred)
• CISA (Preferred)