Analyst, Cybersecurity Governance and Risk

Thanks for your interest in Children's Mercy!

Do you envision finding a meaningful role with an inclusive and compassionate team? At Children’s Mercy, we believe in making a difference in the lives of all children and shining a light of hope to the patients and families we serve. Our employees make the difference, which is why we have been recognized by U.S. News & World Report as a top pediatric hospital, for eleven consecutive years.

Children’s Mercy is in the heart of Kansas City – a metro abounding in cultural experiences, vibrant communities and thriving businesses. This is where our patients and families live, work and play. This is a community that has embraced our hospital and we strive to say thanks by giving back. As a leader in children’s health, we engage in meaningful programs and partnerships throughout the region so that we can improve the lives of children beyond the walls of our hospital.

Overview

The Governance and Risk Services (GRS) Analyst follows existing Cyber Governance and Risk Management processes and procedures, reviews and approves workflows, training plans, knowledge base articles, and organizational documentation. GRS Analyst implements new process and procedures, including training and related documentation, to meet evolving needs. GRS Analyst effectively communicates information to end users, team members, and appropriate escalation tiers within the organization.

At Children’s Mercy, we are committed to ensuring that everyone feels welcomed within our walls. A successful candidate for this position will join us as we strive to create a workplace that reflects the community we serve, as well as our core values of kindness, curiosity, inclusion, team and integrity.

Additionally, it’s important to us that we remain transparent with all potential job candidates. Because we value the safety of the patients and families we serve, as well as the Children’s Mercy staff, we want to let you know that the seasonal influenza vaccine is a condition of employment for all employees in our organization. New employees must be willing to be vaccinated if found non-immune to measles, mumps, rubella (MMR) and chicken pox (varicella) and/or without evidence of tetanus, diphtheria, acellular pertussis (Tdap) vaccination since 2005. If you are selected for this position, you will be asked to supply your immunization records as proof of vaccination. If you and have any concerns about receiving these vaccines, medical and/or religious exemptions can be further discussed with Human Resources.

Responsibilities

Provides support for daily Cyber Governance and Risk workflows and contributes to the creation of new processes and workflows:

• Reviews Governance and Risk workflows to ensure proper review and approval steps are in place.
• Proposes new Governance and Risk workflows as organizational needs change and processes mature.

Provides administration of governance and risk tools and applications throughout their product lifecycle to ensure they are configured, maintained, and accurate to support Cybersecurity Governance and Risk initiatives:

• Creates reports and/or dashboards to monitor health of Cyber GRS solutions.
• Works with vendors of GRS solutions to ensure tools are updated and that new features are considered.
• Identifies gaps, vulnerabilities, or other weaknesses in the implementation of cyber solutions, and contributes to the remediation of risk.

Contributes to the maintenance of the IT risk register, audit documents, and policy standards:

• Serves as content reviewer for Information Systems documents.
• Makes recommendations to Cybersecurity Management on how to determine likelihood and severity of risks.
• Identifies misalignment to industry best practices including ISO 27001/27002, NIST Special Publications, and HITRUST security framework. 

Qualifications

Bachelor's Degree in Risk, Compliance, or other IT Security related field, and 3-5 years' experience. Experience in risk assessment, auditing, data analysis, vendor management, or information systems roles. OR

High School diploma, or equivalent, plus 7 or more years' experience. Preferred certifications and/or additional years of directly related work experience may be considered in lieu of Bachelor's Degree.

Preferred Certifications:

• GRC Auditor (GRCA) certification Preferred
• Certified Information Systems Security Professional (CISSP) Preferred
• CSX Cybersecurity Practitioner (CSX-P) certification Preferred
• Governance, Risk, and Compliance Professional (GRCP) certification Preferred
• Certified Internal Auditor (CIA) Preferred
• HealthCare Information Security and Privacy Practitioner (HCISPP) Preferred

Benefits at Children's Mercy

The benefits plans at Children’s Mercy are one of many reasons we are recognized as one of the best places to work in Kansas City. Our plans are designed to meet the changing needs of our employees and their families.

Starting Pay

Our pay ranges are market competitive. The pay range for this job begins at $34.21/hr, but your salaried offer will be determined based upon your education and experience.

Remote Work/Work from Home

This position is entirely remote or work-from-home. The person hired must live in the Kansas City metro area and may attend on-site meetings, as scheduled.

EEO Employer/Disabled/Vet

Children’s Mercy hires individuals based on their job skills, expertise and ability to maintain professional relationships with fellow employees, patients, parents and visitors. A personal interview, formal education and training, previous work experience, references and a criminal background investigation all are factors used to select the best candidates. The hospital does not discriminate against prospective or current employees based on the race, color, religion, sex, national origin, age, disability, creed, genetic information, sexual orientation, gender identity or expression, ancestry or veteran status. A drug screen will be performed upon hire. Children’s Mercy is smoke and tobacco free.

Our commitment to Diversity & Inclusion

CM is committed to creating a diverse and inclusive workforce. Our patients and families come from all walks of life, and so do we. We know that our greatest strengths come from the people who make up our team so we hire great people from a wide variety of backgrounds, not just because it’s the right thing to do, but because it makes our hospital stronger and our patient care more compassionate.

If you share our values and our enthusiasm for service, you will find a home at CM. In recruiting for our team, we welcome the unique contributions that you can bring, including education, ideas, culture, ethnicity, race, sex, sexual orientation, gender identity and expression, national origin, age, languages spoken, veteran status, color, religion, disability and beliefs.

Salary : $34