What are the responsibilities and job description for the IT Manager 2/Cybersecurity Audit Manager position at Crescens Inc.?
Title: IT Manager 2/Cybersecurity Audit Manager
Location: Atlanta GA
Duration: 12 Months
Notes: HYBRID: ON-SITE TWO DAYS PER WEEK.
Description
Duties & Responsibilities:
Skills:
Location: Atlanta GA
Duration: 12 Months
Notes: HYBRID: ON-SITE TWO DAYS PER WEEK.
Description
- Our Client is seeking a highly skilled and experienced Test Lead to coordinate and lead the testing efforts for the Medicaid Enterprise System Transformation initiative.
- The successful candidate will be responsible for developing and executing comprehensive test plans, ensuring the quality and functionality of the application, and managing a team of testers.
Duties & Responsibilities:
- Risk Management: Identify and assess cybersecurity risks to DCH's information assets, IT infrastructure, and systems. Implement risk management processes and frameworks to prioritize and address vulnerabilities.
- Security Policies and Procedures: Establish and enforce information security policies, standards, and procedures to guide DCH's security practices.
- Security Auditing and Compliance: Conduct regular security audits and risk assessments to ensure compliance with relevant industry standards, regulations, and legal requirements.
- Vendor and Third-Party Risk Management: Assess and manage cybersecurity risks associated with third-party vendors and partners accessing data and systems.
- Regulatory and Legal Compliance: Ensure the department compliance with relevant data protection laws, regulations, and contractual obligations related to information security.
- Continuous Improvement: Continuously assess and enhance cybersecurity program based on emerging threats and industry best practices.
Skills:
- Experience in cybersecurity auditing, with a focus on healthcare or government environments
- Management experience.
- Bachelor's degree from an accredited college or university
- Thorough understanding of federal and state computer security and privacy laws, regulations, standards, and Controls
- Thorough understanding of HIPAA Final Security Rule, the National Institute of Standards and Technology (NIST)
- Thorough understanding of Special Publications (including 800-53 Moderate-ImpactBaseline)
- Experience with HITRUST software
- Experience with AWS
