ITRM CAAS Consultant IV, Technology Risk Office at Kaiser Permanente

Atlanta, Georgia, United States -

Full Time

Start Date

Immediate

Expiry Date

07 Jul, 26

Salary

0.0

Posted On

08 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

IT Risk Management, Compliance Assessment, Information Security, Control Design Testing, Gap Analysis, Risk Assessment, HIPAA, PCI DSS, Security Architecture, Cloud Security, Project Management, Stakeholder Management, Process Documentation, Performance Metrics, Auditing, Financial Management

Industry

Medical Practices

Description

The ITRM CAAS Consultant IV role is an individual contributor position within the Controls Assessment Services (CAS) team, part of KP’s Technology Risk Office. This role is responsible for evaluating the design of information security controls across complex technology and business environments. This position conducts control design testing, gap analysis, and risk assessments to ensure alignment with internal information security controls and external regulatory requirements, including HIPAA and PCI DSS. The role partners closely with KP’s business information security officers, security architecture, cloud security, and technology owners to validate that controls are appropriately designed and implemented. Findings and recommendations are documented to support risk remediation, compliance objectives, and continuous improvement of the organization’s security posture. Job Summary: This individual contributor role executes and/or assists in the planning and execution of ITRM compliance assessment and consulting projects, as well as driving and coordinating the design and implementation of appropriate controls. Additionally, this role manages medium-size ITRM service delivery and engagements, and components of larger initiatives. This role also develops ITRM processes and/or methodology for designated ITRM initiatives by documenting process and/or methodology requirements and acceptance criteria from process owners and key stakeholders and collects and reports performance metrics using company software/reporting tools. Essential Responsibilities: Completes work assignments and supports business-specific projects by applying expertise in subject area; supporting the development of work plans to meet business priorities and deadlines; ensuring team follows all procedures and policies; coordinating and assigning resources to accomplish priorities and deadlines; collaborating cross-functionally to make effective business decisions; solving complex problems; escalating high priority issues or risks, as appropriate; and recognizing and capitalizing on improvement opportunities. Practices self-development and promotes learning in others by proactively providing information, resources, advice, and expertise with coworkers and customers; building relationships with cross-functional stakeholders; influencing others through technical explanations and examples; adapting to competing demands and new responsibilities; listening and responding to, seeking, and addressing performance feedback; providing feedback to others and managers; creating and executing plans to capitalize on strengths and develop weaknesses; supporting team collaboration; and adapting to and learning from change, difficulties, and feedback. Develops ITRM processes and/or methodology for designated ITRM initiatives by documenting process and/or methodology requirements and acceptance criteria from process owners and key stakeholders; and collecting and reporting performance metrics using company software and reporting tools. Executes and/or assists in the planning of ITRM compliance assessments and consulting projects by conducting intake, planning and coordination activities for new or revisions to technology systems or services; and driving and coordinating the design and implementation of appropriate controls through the sustainment phase. Manages ITRM service delivery and engagements of medium size or complexity, or components of larger initiatives by managing multiple workstreams, including stakeholder communications and team mentorship; and managing financials for assigned initiatives. Minimum Qualifications: Bachelors Degree in MIS, Information Security, Accounting, Finance, Audit, or related field and Minimum six (6) years experience in IT risk management, compliance, auditing, or information security. Additional equivalent work experience in a directly related field may be substituted for the degree requirement.

Responsibilities

This role evaluates the design of information security controls and conducts risk assessments to ensure alignment with regulatory requirements like HIPAA and PCI DSS. The consultant also manages medium-sized ITRM service delivery engagements and develops methodologies for designated risk initiatives.