Job Description
Title: IT Security Specialist
Visas: USC/GC/GC-EAD/H4-EAD/OPT-EAD
Rate: $45/hr on C2C MAX
Need LinkedIn, VISA DL
Location: Detroit, MI- Local with Local DL
Last 5 digits of SSN
Need PV names for each project
Resume under 5 pages
Client Reference # BCR0003477
Engagement Description
The EIS Compliance/Governance Analyst will be responsible for assisting in the responsibilities of executing the security framework compliance/governance activities and requirements for Blue Cross Blue Shield of Michigan. Day-to-day responsibilities will also include documenting adherence to governance requirements across policies/standards, procedures, controls, compliance, training and awareness, and preparing metrics/KPIs and reporting materials.
- Evaluate the design and operation effectiveness of Business/IT operations against the HITRUST CSF and identify areas of improvement
- Interview SMEs, examine evidence documentation, analyze and perform testing
- Learn the company functions/processes by conducting process walk throughs
- Analyze root cause of issues, provide recommendations for process improvements and risk mitigation based on assessment findings
- Collaborate with cross-functional teams to mitigate risks and ensure compliance with HITRUST CSF
- Deliver effective and concise documentation that meets HITRUST quality standards
- Prepare and provide reporting such as dashboards and metrics, on various areas of performance, issue analysis and assessment statuses
- Utilize GRC tools to effectively manage assessment remediation plans and documentation
- Serve as a HITRUST subject matter expert
- Participate and provide support during audits, assessments, or other required third-party reviews.
- Support initiatives/projects
- Build relationships internally to foster a culture of teamwork and collaboration
Skills/Experience Needed:
- 5 years of work experience in IT compliance, IT Assessments and/or IT audit experience
- Knowledge and understanding of governance, risk, compliance
- Strong written and verbal communication skills and the ability to tailor communication style to the audience at hand.
- Knowledge of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF, ISO/IEC 27001, COBIT)
- Knowledge of Information Technology GCC as well as knowledge and understanding of governance, risk & compliance.
- Experience working on testing of IT controls across systems, databases, applications and operating systems.
- Experience in coordination and execution of the audit lifecycle, including evidence collection, review, observation tracking, management response collection and auditor relations and communication.
Other Skills:
- Self-starter with effective written and verbal communication skills along with strong critical thinking skill
- Strong demonstration of problem-solving and decision-making ability.
- Strong ability to frame and deliver messages based on experience and level of the listener.
- Strong critical thinking skills to actively pursue opportunities to develop and implement solutions to solve work problems.
- Must be able to solve problems, handle conflict, and make effective decisions under pressure with a highly professional demeanor.
- Strong organizational skills
- Strong ability to adjust to changing priorities while multitasking effectively.
- Self-directed and works with minimal guidance. Proactively seeks guidance when needed.
Education/Certifications – Include:
- Undergraduate university degree (4-year) preferred
- Masters (e.g., MBA, MSIS, MIS, etc.) degree preferred
- 5 years of combined IT experience to include two (2) years IT security work
- Certified Information Systems Security Professional (CISSP), CISA, CPA/CA, CISM or other equivalent professional certification preferred
Kind Regards,
Deep Patel
Sr. Technical Recruiter
ZealHire Inc.
14 Wall Street 20th Floor | New York, NY 10005
