Summary: The Manager of ITSecurity Risk Management is responsible for the CCHCS information security riskmanagement (ISRM) program within the Information Security Office. ISRMsupports the CCHCS mission through the use governance, risk and complianceactivities that detect, prevent or mitigate threats to confidentiality,integrity and/or availability of information resources. In addition tomentoring, coaching and developing staff members, the Manager will utilize thecomponents of the risk management program to identity, quantify and monitorrisk on-behalf of CCHCS stakeholders. He/she will ensure stakeholdershave sufficient decision information with regard to balancingoperational/business needs with risk including any activities that could leadto a violation of federal/state regulations and/or CCHCS policy. TheManager will recommend administrative and technical controls to enforcecompliance with CCHCS policies as well as guidelines and standards set forth bythe Information Security Office. He/she will be responsible for reportingkey performance indicators that will be used to gauge the effectiveness of therisk management program and foster an environment of continuous processimprovement.
Bachelor's degree in the field of computer science and 10years of professional IT experience in progressively responsible roles.
At least 5 years of experience leading and/or buildinginformation security risk management programs that comply with regulations suchas FISMA, FERPA, HIPAA, PCI/DSS, and the Texas Identity Theft PreventionAct.
At least 3 years assessing or implementing securityframeworks such as NIST CSF or HITRUST CSF.
At least 3 years of professional experience managing atleast two or more individuals.
Required qualifications plus 3 years of experience workingwith Governance, Risk and Compliance tools such as Archer or RSAM.
Additional 3 years of professional experience with technicalwriting and enterprise security document creation.
Additional 3 years of technical knowledge of industryenterprise security solutions including vulnerability scanners, data lossprevention, intrusion detection and prevention, firewalls, Mobile DeviceManagement, or other solutions.
Internal Number: 45397
About Cook Children's Health Care System
Cook Children's Health Care System is a not-for-profit, nationally recognized pediatric health care organization comprised of eight entities – a Medical Center, Physician Network, Home Health company, Northeast Hospital, Pediatric Surgery Center, Health Plan, Health Services Inc., and Health Foundation.Cook Children's Medical Center Based in Fort Worth, Texas, the integrated system has more than 60 primary and specialty care offices throughout North Texas. Its service region includes Denton, Hood, Johnson, Parker, Tarrant and Wise counties, with an additional referral area encompassing nearly half the state.Cook Children's traces its roots back to 1918, but throughout its continual change and robust growth, it still embraces an inspiring promise – to improve the health of every child in its region through the prevention and treatment of illness, disease and injury. To live up to this promise, Cook Children's combines the art of caring with the use of leading technology and extraordinary collaboration to provide exceptional care for every child, every day.History – Cook Children's has a rich history of nearly a century of caring for children.Our Promise – Knowing that every child's ...life is sacred, it is the promise of Cook Children's to improve the health of every child in our region through the prevention and treatment of illness, disease and injury.Companies – Based in Fort Worth, Texas, Cook Children's is a not-for-profit organization that is comprised of eight nationally recognized companies.Community Health Outreach – Cook Children's Community Health Outreach works together with over 150 partner organizations to improve the safety and health of at-risk children through education, disease and injury prevention and support.Clinical Research – Cook Children's is home to a skilled team of research-minded physicians, nurses and health care professionals and administrators who drive our commitment to excellent clinical care and the search for medical advances.Public Relations – Cook Children's Public Relations works with national and local media outlets, produces Cook Children's publications, coordinates special events and helps develop key relationships within the community.Contractor & Vendor Information – Cook Children's contractors and vendors must ensure their employees are knowledgeable about working with our organization.Sponsorship guidelines – Cook Children's sponsors a select number of events that are strongly aligned with its promise to improve the health of every child in the region through the prevention and treatment of illness, disease and injury.