HIT Risk Gov Analyst - Third-Party Risk Management

Department:

12231 WI Corporate - Cyber Security

Status:

Full time

Benefits Eligible:

Yes

Hours Per Week:

40

Schedule Details/Additional Information:

This position is for the building and management of a Third-Party/Vendor Risk Management program

Major Responsibilities:

• Conduct risk analysis of HIT applications containing electronic protected health information (ePHI) and Aurora's IT infrastructure.
• Conduct annual site assessments to identify risks and process gaps in the field.
• Maintain the HIT risk register to track identified risks and corrective action plans.
• Develop and maintain metrics to communicate IT risk, including a monthly report of Aurora's top risks for senior management review.
• Coordinate HIT efforts to implement appropriate controls to mitigate IT risk. Reviews risk status with senior leadership on a regular basis.
• Manage and enhance appropriate governance, risk management and compliance (GRC) processes and tools to efficiently manage HIT risk.
• Document security controls for all AAH systems, including but not limited to reviews of current HIT processes and procedures and provide assistance in analyzing and recommending improvements both to minimize risk, but also to guide process owners on potential paths for remediation.
• Coordinates all efforts to effectively identify, report and mediate all security control gaps and vulnerabilities.

Education Required:

• Bachelor's Degree in Computer Science or related field.

Experience Required:

• Typically requires 3 years of experience in IT security, risk management, and information systems control frameworks (NIST, COBIT, ISO). In lieu of experience, a relevant, advanced certification from ISACA, ISC2, SANS, CompTia or other recognized industry certification body would be considered.
• Typically requires 3 years of experience in Risk Management and

Knowledge, Skills & Abilities Required:

• Excellent organizational and project management skills with the ability to manage and complete multiple projects.
• Proven analytical and problem solving skills.
• Excellent communication skills including the ability to advise and communicate with individuals at all levels of the organization.
• Ability to lead cross-functional teams to improve HIT processes and mitigate risk.

Physical Requirements and Working Conditions:

• Position may require travel which may result in exposure to road and weather hazards.
• Exposed to normal office environment.
• Operates all equipment necessary to perform the job.
• Must Live near an Advocate Aurora Hub IL/WI

This job description indicates the general nature and level of work expected of the incumbent. It is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the incumbent. Incumbent may be required to perform other related duties.

Advocate Aurora Health is one of the 10th largest not-for-profit, integrated health systems in the U.S. with nearly 3 million patients served at more than 500 sites of care in Illinois and Wisconsin, including 28 hospitals. We're redefining the standard for care with world-class doctors and caregivers, innovative solutions, outstanding outcomes, and leading-edge research and clinical trials. Combined, Advocate and Aurora are recognized for clinical excellence in a variety of specialties. Advocate Aurora Health is one of the 10th largest not-for-profit, integrated health systems in the U.S. with nearly 3 million patients served at more than 500 sites of care in Illinois and Wisconsin, including 28 hospitals. We're redefining the standard for care with world-class doctors and caregivers, innovative solutions, outstanding outcomes, and leading-edge research and clinical trials. Combined, Advocate and Aurora are recognized for clinical excellence in a variety of specialties.