OVERVIEW AND REPORTING RELATIONSHIP

The Supervisor, GBC Cybersecurity Risk Management, will report to the Director of Cybersecurity Risk Management, responsible for managing a team of Vendor Risk Assessment and Security Risk Analysts to identify, classify, and collaboratively mitigate information and cyber risks enterprise wide.

REPORTING STRUCTURE & WORK SETTING

The position is in the Global Business Center in Manila, Philippines, reporting within the Cybersecurity Risk Management team, under Tenet's Cybersecurity organization. The position is an on-site and night shift work arrangement.

RESPONSIBILITIES

As a member of the GBC Cybersecurity Risk Management team, the Supervisor will lead the local Manila team to work with IS leadership to identify risks which threaten the confidentiality, integrity, and availability of patient, employee, and business information in compliance with the organization’s policies and procedures.

This person will lead the GBC Cybersecurity Risk Management team to work with internal and external stakeholders to ensure that: (a) IT security risks are properly identified and evaluated; (b) requirements for HIPAA, PCI and Meaningful Use Security Risk Analysis are met; (c) identified risks posed by vendors and risks at each Tenet facility are rolled up and reported in a usable fashion; (d) unmitigated risks are tracked to enable regular follow up; and (e) program standards and security questionnaires are continually updated to ensure that emerging risks are accounted for, identified, and tracked.

As an Information Security subject matter expert, understand and identify administrative, technical, and physical security controls or the lack thereof and provide direction for remediation efforts to correct findings.
Identify areas of weakness in vendor security controls, which could introduce risk to Tenet data and/or systems and document findings in Tenet’s ServiceNow Vendor Risk Management module.
Perform assessment of information security risks posed by internal and external threats and vulnerabilities.
Collaborate with various facilities and corporate contacts to ensure that risks to Tenet data, including ePHI and PII, are properly identified, documented, prioritized, and reported to facility leadership.
Identify emerging issues and recommend solutions to IS leadership.
Provide oversight on GBC personnel to ensure alignment with business goals and bridge concerns to leadership.
Act as a motivating power to group efforts.
Assist, coach, mentor, and train team members, as needed.
Assist in identifying opportunities for cost savings throughout the process (e.g. process refinement, elimination of duplicated efforts).
Work across Tenet and its facilities to complete Security Risk Analysis activities.
Assist management with enterprise risk assessment and annual Security Risk Analysis plan development.
Evaluate IT general controls (ITGC) including information security, systems development life cycle (SDLC), change management, data center / physical security, data backup and recovery, business continuity, and associated risk exposures.
Stay abreast of advances in technology and security trends and developments; regularly share knowledge with staff and IS management; effectively interact with various levels of internal management.

WORK EXPERIENCE AND EDUCATION

Minimum 10 years of experience with a BS in Computer Science or equivalent field.
3-5 years of supervisory experience
CISA, HCISPP, CISSP, CISM or other related certification
Preferred education and/or experience: Experience working in cross-departmental teams and leading efforts through collaboration and influence.

IS Audit Manager

About Tenet Healthcare