Regional Information Security Officer
Regional Information Security Officer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
UPH Additional Information
Why UnityPoint Health
Commitment to our Team Were proud to be recognized as a Top 150 Place to Work in Healthcare by Beckers Healthcare several years in a row for our commitment to our team members.
Culture At UnityPoint Health you matter. Come for a fulfilling career and experience a culture guided by uncompromising values and an unwavering belief in doing whats right for the people we serve.
Benefits Our competitive Total Rewards program offers benefits options that align with your needs and priorities no matter what life stage youre in.
- Caring is what we do and it starts with our team members: expect paid time off parental leave 401K matching and an employee recognition program as we support you both personally and professionally.
- You can only give your best when you feel your best and we help you live well with dental and health insurance paid holidays short and longterm disability and more. We even offer pet insurance for your fourlegged family members to give you peace of mind.
- We strive to make things easier and more personal in health care to set us apart from the rest and you can experience that commitment through early access to earned wages with Daily Pay a tuition reimbursement program designed to help you further your career and adoption assistance to help you grow your family in the way that works for you.
Diversity Equity and Inclusion Commitment At UnityPoint Health we honor the ways people are unique and embrace what brings us together. Our collective goal is to champion a culture of belonging where everyone feels valued and respected.
Development We believe equipping you with support and development opportunities is an essential part of delivering a remarkable employment experience.
Community Involvement Be an essential part of our core purposeto improve the health of the people and communities we serve.
Hear more from our team members about why UnityPoint Health is a great place to work at
What are team member vaccine requirements
As part of keeping our communities safe and healthy all team members must be vaccinated for influenza and Tdap provide proof of immunity to MMR and varicella and be tested for tuberculosis. New hires must submit proof of vaccination or an approved exemption to begin work. If you have questions please contact a recruiter or ask at any time during the interview process. UPH strongly recommends that all team members receive the updated COVID19 vaccine and at this time UnityPoint Health Meriter requires Covid19 vaccination or an approved exemption.
Overview
The Regional Information Security Officer (RISO) is responsible for the and oversight of the systemwide information security program at the direction of the Chief Information Security Officer (CISO) as it relates to the RISOs region affiliate or service line. The RISO is responsible for promoting adoption and supporting the enterprise information security initiatives; assessing and managing information security risks; acting as the escalation point for information security issues for the region affiliate or service line; and serving as the liaison between the business and System
Services to promote reinforce and ensure compliance with the UnityPoint Health (UPH) Information Security Program. The RISO will coordinate efforts with the UPH CISO and other RISOs to share knowledge resources and information in order to know and understand the information security policies procedures guidelines and standards and how to most appropriately apply them. The RISO is responsible for safeguarding information in all forms and the associated assets within their region affiliate or service line which is accomplished by the performance of regular and ongoing risk assessments of administrative physical and technical controls and management of the risk mitigation plan(s).
Location: Remote applicants required to live in Iowa Illinois or Wisconsin as there is monthly travel to the UPH facilities.
Responsibilities
Advancement of Information Security Program in Region Affiliate or Service Line
- Support projects to create implement manage and enforce information security directives as mandated by federal state and local agencies and to appropriately mitigate information risks
- Support the development and ongoing management of the information security program for UPH including policies procedures guidelines awareness and training plan overall security infrastructure and monitoring
- Ensure the ongoing integration of information security with business strategies and requirements within the region affiliate or service line
- Ensure access control disaster recovery business continuity incident response risk management and other information security best practices are properly addressed in the region affiliate or service line
- Support information security awareness and training initiatives to educate workforce about information risks and how to mitigate them
- Participate in ongoing information risk assessments and audits to ensure that information systems are adequately protected and meet all regulations
- Work with vendors outside consultants and other third parties to improve information security within the organization
- Monitor the effectiveness of the information security program throughout region affiliate or service line and provide regular reports to the local Compliance Committee and the CISO
- Work closely with the Regional Privacy Officers for ongoing application of technology functionality to protect PHI
- Stay uptodate with current and emerging information security threats reported incidents and new and updated data protection laws and regulations
Customer Service
- Fulfills the ISO role for the assigned region affiliate or service line
- Advises communicates and responds to individuals regarding information security questions
- and/or concerns
- Supports the UPH strategic direction and balances it with the specific business and information systems needs of the customers
- Performs daily monitoring investigation and mitigation of security violations
- Understands system security requirements by business function
- Communicates with all levels of management and end users concerning the policies procedures standards and guidelines related to information security
- Ensures that the communication occurs and is appropriate at each level
Information Security Standards Policies and Compliance
- Oversees risk assessment and risk management processes for their assigned region affiliate or service line
- Assists in the investigation planning documentation implementation maintenance and testing of incident response business continuity emergency operations and disaster recovery plans and audit controls
- Assists in the development of an education program that promotes security planning awareness and training throughout the organization
- Provides expertise to projects to ensure compliance with UPH policy security and privacy standards and state and federal laws and regulations
- Reports nonadherence and nonconformity to standards and policies to local governing bodies and the CISO
Qualifications
- Bachelors degree is required. Equivalent education and work experience will be accepted only if previous experience applies to specific work in the information protection field
- At least five 5 years of experience in information security or healthcare regulations
- Broad understanding of HIPAA compliance regulations information protection and technology controls auditing processes and disaster recovery/contingency planning
- Excellent communication planning and organizational skills
- Understands computer system functionality limitations and architecture of supported applications and platforms
Required Experience:
Unclear Seniority
Employment Type
Full-Time
