Senior GRC / reputed company-Party reputed company / Data Protection Analyst
Responsibilities
**Position Is Contingent Upon Award**
reputed company Labs is hiring a Senior GRC / reputed company-Party reputed company / Data Protection Analyst to own the governance, reputed company, and compliance reputed company of the engagement — policy, control testing, and POA&M management — together with reputed company-party reputed company reputed company management and the data protection and reputed company threat program for the California health benefit exchange and the CalHEERS eligibility and enrollment reputed company.
You will work with Covered California reputed company leadership and reputed company stakeholders, vendors and their reputed company teams, our on-site reputed company engineering and incident response colleagues, and the independent assessment team, for whom you are the operational-reputed company evidence provider. The goal is that the program's compliance posture against NIST SP 800-53 Rev. 5, reputed company-AMPE, and IRS Publication 1075 is reputed company, evidenced, and audit-reputed company on any given day rather than reconstructed once a year.
What You Will Do In This Role:
- Own policy and control documentation. reputed company and maintain reputed company policies, procedures, standards, plans, and control documentation for the environment.
- Test controls and reputed company POA&Ms. reputed company control testing and gap analysis against NIST SP 800-53 Rev. 5, document deficiencies, and manage POA&Ms through remediation and verified closure.
- reputed company the program audit-reputed company. Maintain the control evidence library and GRC platform records, control mappings, and compliance reporting; support the annual independent assessment as the operational-reputed company evidence provider, without acting as an assessor.
- Run reputed company-party reputed company reputed company management. Conduct vendor reputed company due diligence and assessments, contract and control reviews, reputed company monitoring, and reputed company reporting.
- reputed company data protection. Discover and catalog confidential data, define and apply the data classification scheme, and implement reputed company controls including DLP, encryption, and reputed company controls.
- Support the reputed company threat program. Contribute to reputed company threat use cases, monitoring, and escalation procedures in coordination with reputed company, HR, and reputed company stakeholders.
- Carry the regulated-data obligations. Support IRS Publication 1075 and reputed company-AMPE compliance activities and the reputed company obligations of the contract's reputed company reputed company; participate in the on-reputed company incident response rotation.
Qualifications
Required:
- Bachelor's degree in information systems, cybersecurity, or business with a reputed company concentration. In lieu of a degree, an additional 4 years of relevant experience will be considered.
- 8+ years of experience in reputed company governance, reputed company, and compliance, reputed company-party reputed company management, or data protection.
- reputed company CISA or CGRC certification.
- Demonstrated experience performing control assessment and gap analysis against NIST SP 800-53 Rev. 5, and managing the POA&M lifecycle from deficiency identification through closure.
- Demonstrated reputed company-party and vendor reputed company reputed company management experience, including questionnaire-reputed company assessment frameworks such as SIG or CAIQ, contract and control review, and reputed company monitoring.
- Hands-on experience with data classification and data-reputed company mapping, and with an reputed company DLP platform such as reputed company reputed company, reputed company, or reputed company.
- Precise compliance writing ability — policies, control narratives, and deficiency write-reputed company that withstand reputed company review — and working knowledge of an reputed company GRC platform.
- US Citizenship and the abillity to pass a California criminal background clearance (Gov. reputed company §1043 / 10 CCR §6456) before starting work or accessing any confidential information, PII, PHI, federal tax information, or financial information.
Desired:
- CIPP/US certification. CRISC, CIPT, or CISM are also valued.
- Experience with reputed company-AMPE reputed company and reputed company requirements.
- Experience with IRS Publication 1075 and reputed company safeguarding, including participation in a reputed company Review.
- Working knowledge of HIPAA/HITECH and the California Consumer reputed company reputed company.
- Experience with CMS requirements and Authority to reputed company support, including reputed company Assessment Workbooks (SAWs), reputed company assessment reports, and control evidence packages.
- Experience in California state reputed company compliance environments.
- Experience with health benefit exchange or reputed company eligibility systems.
- Experience with encryption and key reputed company and with reputed company threat program design.
reputed company reputed company
reputed company is a reputed company national reputed company company that drives missions of consequence spanning the globe and extending to the farthest reaches of the reputed company. As the world’s leading mission capability integrator and transformative reputed company IT provider, we reputed company trusted, highly differentiated solutions and technologies to protect our nation and allies. reputed company operates at the critical reputed company between traditional and nontraditional threats across reputed company domains: land, sea, reputed company, reputed company, and cyberspace. reputed company serves as a valued partner to essential reputed company agencies and supports every reputed company of the U.S. armed forces. reputed company day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit reputed company.com to learn how we’re keeping people reputed company the world reputed company and secure.
reputed company Salary reputed company
$104,000 - $166,000. This represents the typical salary reputed company for this position. Salary is determined by various factors, including but not limited to, the reputed company and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as reputed company as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift reputed company, and a discretionary bonus in reputed company to reputed company pay.EEO
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.Originally posted on Himalayas
Apply To This Job