100,000's of Government Jobs

Search Government Jobs

Job Field: Legal Jobs
Location: Pleasanton, CA
Salary: $Not stated

JOB SUMMARY:

---

</tr>
<tr><td valign="top" width="450"><b>Title: Senior Manager, Controls Integration for Information Security ComplianceLocation: Pleasanton, CAThe KP Information Security Compliance (ISC) function provides subject matter expertise across technical, project management, and business consulting disciplines in support of KP compliance activities. Members of ISC work across a number of compliance related initiatives to ensure integrated processes and procedures and that controls are adequately designed, implemented, remediated, and/or monitored to meet audit and integrated compliance expectations (e.g.; SOX, PCI, HIPAA, Meaningful Use, SAS70/SSAE16, etc.), operating efficiency goals, and other business objectives. ISC provides integrated coordination, facilitation, execution, and monitoring of security controls across the security domain for a variety of regulations.The continued evolution of Health Care reform has driven unprecedented changes in the regulatory and compliance landscape within the Health Care industry. You will be responsible for partnering with business and technology constituencies to address these evolving challenges by embedding integrated audit, risk, and compliance management competencies. The success of this unit requires dedicated professionals who possess the analytical, audit, relationship, and executive communication skills needed to form highly reliable and sustainable risk management approaches in order to meet various compliance requirements in an integrated manner.You will be responsible for collaborative, integrated control identification, definition, product/service tuning, corrective action plan (CAP) remediation monitoring, issue identification, risk management, and associated reporting requirements across a variety of key compliance regulations and tools. In addition, you will form highly reliable executive summaries, closure packages, risk management strategy documents, and remediation approaches to meet various audit and compliance requirements in an integrated, efficient manner applying industry standard frameworks and practices.Other activities include development GRC-supported services, ISC metric reporting, security control evaluation, and on-going monitoring of compliance across defined control standards. You will be required to assess gaps and recommend modifications to established practices and procedures and successfully handle a full range of complex assignments and projects across diverse systems and requirements. You will educate control owners on internal controls and provide expert consultation on IT security control issues and remediation solutions to mitigate risk.Responsibilities include:- Integrated management of several of KP''s compliance efforts across SOX, HIPPA-MU, and PCI within the IT Security domain- Leading and/or collaborating with teams of Process Analysts, Business Analysts, Program Managers, and/or service managers to define integrated control requirements and remediation strategies to attain compliance- Designing, building out, and enhancing integrated IT Controls for SOX, HIPPA, and PCI (amongst other regulations)- Collaborating with different Business and IT units to plan, implement, sustain, and monitor SOX, HIPPA-MU, and PCI compliance programs in an integrated manner- Maintaining an in-depth understanding of the broad regulatory landscape impacting KP business and IT areas and common integrated frameworks- Remaining current with emerging regulatory sentiments as well as solution trends in the marketplace- Understanding the impact of laws and regulations on KP systems and technology- Working with client organizations within KPIT to ensure remediation efforts address noted deficiencies in a sustainable and appropriate manner, given organizational policies and standards- Ensuring accurate reporting across a wide range of KP organizations- Performing risk/security assessment studies to validate remediation approaches and effectively escalate situations where compliance risk is identified- Performing in

KEY REQUIREMENTS:

---

Not stated