HYBRID: ON-SITE TWO DAYS PER WEEK.
POSITION AVAILABLE FOR EXTENSIONS BASED ON PROJECT AND BUDGET APPROVAL.
The Client seeks a dedicated and skilled Cybersecurity Audit Manager to lead its cybersecurity auditing and compliance initiatives. This position is pivotal in ensuring DCH's compliance with federal and state regulations, protecting sensitive information, and managing cybersecurity risks. The Cybersecurity Audit Manager will be key in safeguarding DCH's IT infrastructure and assets while enhancing overall security practices.
The successful candidate will be responsible for:
-Cybersecurity Risk Management: Identifying and mitigating risks to DCH's information systems and assets.
-Policy Development and Enforcement: Establishing and enforcing security policies, standards, and procedures.
-Auditing and Compliance: Conducting regular audits and assessments to ensure compliance with industry regulations and legal standards.
-Vendor Risk Management: Assessing and managing third-party risks related to cybersecurity.
-Continuous Improvement: Enhancing the cybersecurity program in response to emerging threats and evolving best practices.
Qualifications:
In-depth knowledge of federal and state security regulations, including HIPAA and NIST frameworks.
At least five years of experience in cybersecurity auditing, with a preference for healthcare or government environments.
Minimum of one year of management experience.
Education:
Bachelor's degree from an accredited institution.
This role offers the opportunity to drive meaningful change in protecting critical health information systems while contributing to DCH's mission of improving the health and wellness of millions of Georgians.
| Skill | Required / Desired | Amount | of Experience |
| Experience in cybersecurity auditing, with a focus on healthcare or government environments | Required | 5 | Years |
| Management experience. | Required | 1 | Years |
| Bachelor's degree from an accredited college or university | Required | | |
| Thorough understanding of federal and state computer security and privacy laws, regulations, standards, and Controls | Required | | |
| Thorough understanding of HIPAA Final Security Rule, the National Institute of Standards and Technology (NIST) | Required | | |
| Thorough understanding of Special Publications (including 800-53 Moderate-Impact-Baseline) | Required | | |
| Experience with HITRUST software | Required | | |
| Experience with AWS | Required | | |