Senior Cybersecurity Policy & Compliance Analyst (Remote Available)

Discover Vanderbilt Health : With eight hospitals and over 180 clinics, we are the region’s largest comprehensive academic health system. Vanderbilt Health has a long tradition of providing world-class care to the people of the Mid-South, living out our mission of moving medicine forward through preeminent programs in patient care, education and research. Here you’ll find a spirit of collaboration and a supportive community where your expertise is valued, your knowledge expanded and your uniqueness celebrated. We are committed to fostering an environment where talented, compassionate people are united in bringing the most advanced care to our neighbors throughout the region.
Organization:
VEC Policy & Compliance Job Summary:
The Senior Cybersecurity Analyst assists in the creation, coordination and execution of policy & privacy/security compliance programs across VUMC. The Senior Cybersecurity Analyst assists leadership in supporting these compliance programs that are expected to experience significant change, expansion or evolution over time.

(Note: This role is available for remote work from most parts of the US and with this role we are targeting a salary range of $115k - $145k.) .
KEY RESPONSIBILITIES:

-
Assist in conducting cybersecurity compliance reviews and tracking compliance gaps to remediation.

-
Assist in development/review of cybersecurity policies and procedures .

-
Consult with workforce members on regulatory and policy requirements.

-
Assist in conducting cybersecurity control compliance reviews for international travelers.

-
Act as cybersecurity compliance representative on cross-functional work teams.

-
Assist with project/organizational risk assessments.

-
Develop, implement and monitor security compliance work plans for the organization.

-
Develop/improve processes for evaluating/documenting security compliance.

-
Assist in responding to third party audits (payers, research partners, vendors, etc.).

-
Assist in responding to internal audits (assist in managing and completing Management Action Plans (MAPs)).

-
Assist in developing cybersecurity training initiatives.

-
Prepare regular reports for executive review.

-
Maintain an in-depth knowledge of privacy/security-related regulatory frameworks such as HIPAA, GDPR and provide timely information regarding important regulatory changes to operational leaders.

PREFERRED QUALIFICATIONS:

-
Bachelor’s degree in related field or equivalent experience.

-
Experience writing/editing policies and procedures .

-
Experience managing compliance documentation, including but not limited to committee charters, confidentiality agreements and annual attestations.

-
Excellent organizational, analytical, and time management skills.

-
Effective interpersonal, writing, and communications skills required.

-
Experience with US and international privacy / security-related regulatory frameworks (HIPAA/HITECH, GDPR, etc…).

-
Ability to work independently with minimal supervision.

-
Experienced with business process development / improvement.

-
Ability to manage multiple competing priorities within the context of a complex, multi-faceted organization.

-
At least 3 years experience in cybersecurity.

-
Information Security Related Professional Qualification (e.g., CISSP, CISA, Security+, CEH, GSEC, etc.)

TECHNICAL CAPABILITIES:

PROGRAM MANAGEMENT (INTERMEDIATE): Planning, organizing, and managing resources to bring about the successful completion of specific program goals and objectives.

RISK AND COMPLIANCE ASSESSMENTS (INTERMEDIATE): Ensuring compliance with established foreign and domestic laws and regulations and VUMC institutional policies and procedures and recommending any necessary changes. This activity will include the independent review and examination of IT systems, architectures, data flows, etc., and the documentation and reporting of such assessments in support of VUMC programs.

PEER LEADERSHIP (INTERMEDIATE): The