Senior Governance Risk Compliance Analyst

Texas Behavioral Health Center

Join our team and help launch the first state psychiatric hospital in Dallas-Fort Worth, where innovative caregivers will make a lasting impact on behavioral health in Texas.

The Texas Behavioral Health Center is a newly completed state-funded psychiatric hospital opening in Dallas' Southwestern Medical District that is owned by the Texas Health and Human Services Commission (HHSC) and operated by UT Southwestern Medical Center.

When fully operational, the 505,000-square-foot facility will house 292 beds - 200 for adult patients and 92 for children and adolescents. As DFW's first state-funded behavioral health hospital, it is designed to deliver state-of-the-art, patient-centered care in a modern and healing environment. The center provides comprehensive behavioral health treatment and features private patient rooms, abundant access to natural light and nature, and thoughtfully designed spaces that promote recovery. The hospital will also provide training to all behavioral health disciplines.

As employees of UTSouthwestern, team members will join a world-class academic medical center committed to patient-centered care, innovation, interdisciplinary collaboration, and preparing patients for successful reintegration into their families and communities. With competitive benefits and a mission-driven culture, Texas Behavioral Health Center offers an unparalleled opportunity to make a lasting impact on mental health care in North Texas.

JOB SUMMARY
Develops, implements and operationalizes the Information Security governance and risk management functions to ensure the Program is compliant with established security controls frameworks, regulatory and legal requirements, policies and standards. Ensures that Information Security risk to the institution is appropriately managed. Subject matter expert on mature security governance structures and processes, risk management processes (enterprise and third party), and contractual, regulatory compliance requirements Leads and executes enterprise-wide security assessments and strategic projects to mature the Program. This position will support Texas Behavioral Health Center.

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education
  Bachelor's Degree in computer science, information technology, or related field

• Experience
  8 years of progressively responsible technology governance experience
  Additional years of directly related experience may be substituted for stated degree on a year for year basis.

Preferred

• Progressively responsible experience establishing Information Security frameworks and aligning security controls (e.g. CIS, NIST, HIPAA, PCI), framework and Control gap analysis and remediation, project management, threat and risk modeling, building and maintaining a risk register.
• Ability to respond to and audits, and leverage GRC tools (e.g. Archer, Logic Manager, Optro).
• Experience creating framework-based risk assessments and consulting with technical and non-technical staff to implement and advance GRC initiatives based on best practices.
• Possession of an industry certification, such as CRISC, CGRC, CISA.
• Preferred experience working within a behavioral or mental health care environment, specifically performing information security, compliance, or risk management functions.
• Expertise in HIPAA, The Joint Commission standards, Texas Administrative Code Chapter 477 (Information Security Standards), and the Texas Health and Safety Code.

JOB DUTIES

• Risk Management: Implements established risk frameworks for the Information Security program.
• Risk Assessments: Establishes and operationalizes formal security risk assessment frameworks to quantify and qualify risk including for third-party vendor risk, technology procurement (ISAC) and internal security controls. Leads and executes enterprise-wide security assessments and strategic projects to mature the Program.
• Audit & Compliance: Tracks audit findings, coordinates creation of audit deliverables and ensures audit compliance. Ensures Information Security Program compliance with established security controls framework, and regulatory and legal requirements, policies and standards.
• Metrics, KPIs and Reporting: Develops metrics and KPIs for Information Security Program maturity and operational and executive reporting.
• Program Governance: Assists with creation and management of program governanace.
• Interfaces with departments, Information Resources, third-party vendors, and business partners to identify areas of risk and assist with development of plans to establish and maintain ongoing compliance.
• Assists with various Information Security projects. Stays up to date with regulatory changes, modern technology & security controls and practices.
• Performs other duties as assigned.