Sr Business Information Security Consultant

at  Health Care Service Corporation

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.
Join HCSC and be part of a purpose-driven company that will invest in your professional development.
This position is responsible for a given portfolio aligning information security (is) services with business / it priorities and capabilities; serving as the is single point of contact for the portfolio, ensuring transparency and accountability for all is services supporting the business portfolio; understanding business / it strategies and working across is teams to translate into is risks, impacts and solutions; promotes the protection and security of the portfolio’s data and client information, data, systems and intellectual property. Act as a business liaison and security evangelist to the it portfolios / business counterparts, identifying business needs and helping sell the business case for security. Understand and communicate business requirements and project timelines. Engage security design & architecture team to understand security implications and plan project timelines. Understand security technologies & compliance policies. Prepares periodic cybersecurity reports for senior business management summarizing their risk posture. Interprets and translates the cybersecurity requirements/needs of the business into technical requirements. Helps to determine the appropriate levels of controls to safeguard sensitive data and validate those controls are being implemented. Collaborate with internal/external business partners to help develop and implement effective information security and privacy programs. Serve as an information security subject matter expert for business portfolio. Manage, monitor, and track information security initiatives. Coordinates the information security compliance activities, including adherence to applicable laws and standards such as HIPAA, PCI-DSS. Facilitate risk remediation discussions with key stakeholders and SME’s. Provide business feedback into is services, processes, and capabilities for improvement. Responds to security events by initiating and coordinating emergency actions to protect the business unit from an imminent loss of information or value. Monitors changes in the risk profile of the highly critical systems.

REQUIRED JOB QUALIFICATIONS:

• Bachelors Degree and 8 years in Information Technology / Security.
• Understanding of business and IT priorities (e.g., vision), trends (e.g., industry knowledge) and markets (e.g., existing/ planned).
• Understanding of current and emerging IT risks.
• Understanding of business operations including products and services.
• Problem solving / analytical skills, tools and techniques.
• Customer relationship management.
• Experience with compliance requirements (ex. HIPAA).
• Experience interacting with business leadership teams and advising them on compliance risks and issues.
• Written and verbal communication skills, including the ability to present ideas and concepts effectively to management.
• Technical understanding of client/server technologies, virtualization, application management, security principles, data storage and data center.
• System and technology integration
• IT security standards, procedures, policies (e.g., Hippa).
• Portfolio-specific applications and technologies.
• Portfolio management skills.
• Ability to navigate organizational politics.
• Ability to influence / negotiate.
• Interpersonal skills.
• Ability to understand and translate strategic vision into business language.
• Ability to recognize and drive need for change.
• Conflict management.
• Teamwork and collaboration.

PREFERRED JOB QUALIFICATIONS:

• Bachelors Degree in Computer Science, MIS.

Please refer the Job description for details