Director, Security - GRC

Concentra Careers$125K — $150K *
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's Degree in Computer Science or Information Security
  • 8-10 years of experience in risk management
  • 3-4 years of project management experience
  • Experience in cloud and SaaS GRC program development
  • Knowledge of privacy frameworks (SOX, SOC2 Type 2, PCI, NIST, HIPAA)
  • Outstanding customer service skills
  • Ability to handle sensitive information in accordance with laws and policies
  • Exceptional written and verbal communication skills.

Responsibilities

  • Create and maintain Security Compliance policies
  • Perform security risk assessments and develop recommendations
  • Lead Third Party Risk Management (TPRM) program
  • Oversee platform security compliance audits
  • Manage complex security projects with multiple stakeholders
  • Develop metrics to track security program effectiveness
  • Conduct security awareness training for teams

Benefits

  • 401(k) Retirement Plan with Employer Match
  • Comprehensive Medical, Vision, Prescription, and Dental Plans
  • Life and Disability Insurance
  • Paid Time Off
  • Tuition Reimbursement
  • Colleague Referral Bonus Program
  • Commuter Benefits
  • Dependent Care Spending Account
  • Employee Discounts
Full Job Description
Overview

The Director, Security - GRC (Governance, Risk Management, and Compliance) will lead the efforts in maintaining compliance with various regulatory and security frameworks. This role requires a deep understanding of security, compliance, regulatory frameworks, platform management, vendor security reviews, third party risk management and customer interactions. Requires a strong ability to collaborate across functions and provide valuable insights and leadership in enhancing our security and compliance environment (s).

Responsibilities

  • Create and maintain Security Compliance policies
  • Perform security risk assessments to identify gaps, develop recommendations and close the gaps to completion and resolution
  • Lead and maintain and Third Party Risk Management (TPRM) program
  • Setup Internal audit processes for various security needs
  • Oversee platform security compliance audits for new regions to comply with legal regulations
  • Project management that includes the knowledge to initiate and drive complex security projects requiring various stakeholders
  • Develop metrics to track security program effectiveness and to report risk
  • Create a governance program for different security areas like Infrastructure, Application, SOC and others
  • Identify critical security audit areas, establish the audit process and have completed audit of few areas
  • Create and update security risk metrics to measure the risk levels across systems and processes
  • Conduct security awareness and educational trainings for the company and specific teams
  • Facilitate and participate in internal audits of critical processes and as required for PCI and SOX
  • Complete risk assessments of high-risk processes and come up with gaps and recommendations
  • Rollout security awareness trainings for the company and GRC team


Qualifications

  • Education Level: Bachelor's Degree Major: Computer Science, Information Security
  • Minimum of 8-10 years of experience related to risk management
  • Three to four years of project management experience
  • Experience developing GRC programs in a cloud and SaaS environment.
  • Concentra Core Competencies of Service Mentality, Attention to Detail, Sense of Urgency, Initiative and Flexibility
  • Ability to make decisions or solve problems by using logic to identify key facts, explore alternatives, and propose quality solutions
  • Outstanding customer service skills as well as the ability to deal with people in a manner which shows tact and professionalism
  • The ability to properly handle sensitive and confidential information (including HIPAA and PHI) in accordance with federal and state laws and company policies
  • Experience with privacy frameworks, such as SOX, SOC2 Type 2, PCI, NIST and HIPAA
  • Experience with third party risk management
  • Strong collaborator, with experience working on teams composed of both technical and non technical members
  • Demonstrated ability to lead large projects, problem-solve, multitask, and have excellent organizational skills
  • Excellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal collaborators and external auditors
  • Thrive in a data-driven, fast-paced and innovative environment
  • Strong prioritization skills and the ability to handle multiple job duties in a fast-paced environment
  • Exceptional communication skills and the ability to communicate appropriately at all levels of the organization, written and verbal


Additional Data

Employee Benefits
  • 401(k) Retirement Plan with Employer Match
  • Medical, Vision, Prescription, Telehealth, & Dental Plans
  • Life & Disability Insurance
  • Paid Time Off
  • Colleague Referral Bonus Program
  • Tuition Reimbursement
  • Commuter Benefits
  • Dependent Care Spending Account
  • Employee Discounts


*This job requires access to confidential and sensitive information, requiring ongoing discretion and secure information management*

About Concentra Careers

Concentra Careers

There has never been a better time to explore the diverse job opportunities at Concentra. As a leader in health services, Concentra offers a unique blend of innovation, leadership, and professional growth. Join a team that is dedicated to shaping the future of workplace health and wellness.

Work You'll Do

Join Concentra's exceptional team to assist some of the nation's top companies in managing their employee health in the most efficient way possible. At Concentra, the focus is on leveraging expertise in health and wellness to transform the standard of care in the workplace. Lead in a market where health, industry expertise, and digital innovation meet. Concentra positions itself uniquely in the marketplace, providing a pivotal role in the evolution of occupational healthcare. Engage with a nationwide network of professionals who are renowned for their skills, dedication, and commitment to advancing health services.

Introducing the Concentra Career Development Program

The program is designed to foster professional growth and prepare individuals for leadership roles within the company. Concentra is committed to nurturing talent and providing employees with the tools they need to succeed.

Do Innovative Work

Be part of a team that is not only the largest but also among the most innovative in the health services industry. With over 12,000 dedicated professionals, Concentra is at the forefront of industry expertise and digital innovation.

Drive Your Career Forward

Deliver targeted health solutions and play a crucial role in the development of industry-leading practices. Concentra offers a depth and breadth of knowledge and experience that is unmatched in the healthcare industry.

Be Part of a Great Team

Work with a diverse team that values collaboration and is driven by a shared goal of improving health outcomes. Concentra's culture is built on diversity, inclusion, and a commitment to employee well-being.

Future-Proof Your Career

With a wide array of career paths and educational opportunities, Concentra ensures that every team member has the resources to reach their full potential. The company supports career advancement through comprehensive training programs and certifications.

Explore

Discover how Concentra is revolutionizing health management and improving service delivery across multiple platforms. From clinical care to back-office support, Concentra is a leader in integrated health services.

The Concentra Commitment

With a steadfast commitment to innovation and quality, Concentra continues to lead the way in workplace health. The company's collaborative approach ensures that each client receives customized and effective solutions. ## Stay Connected

Join the Team

Search for open positions that match your skills and interests. Concentra is looking for passionate, curious, and solution-driven individuals. SEARCH CONCENTRA JOBS

Keep Up to Date

Stay informed with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the professionals who work at Concentra.

READ CAREERS BLOG

Job Alert Emails

Customize your subscription to receive job alerts, the latest news, and insider tips tailored to your preferences. Explore the exciting and rewarding opportunities that await at Concentra.
Learn more about Concentra Careers
Industry

Similar Jobs

More Jobs at Concentra Careers

More Information Technology Jobs

Find similar Director, Security - GRC jobs: