Leader, Cyber Security GRC

At MVP Health Care, we're on a mission to create a healthier future for everyone - which requires innovative thinking and continuous improvement. To achieve this, we're looking for a Leader, Cyber Security GRC to join #TeamMVP. If you have a passion for Cybersecurity, risk analytics, and working in a collaborative environment, this is the opportunity for you.

• Growth opportunities to uplevel your career
• A people-centric culture embracing and celebrating diverse perspectives, backgrounds, and experiences within our team
• Competitive compensation and comprehensive benefits focused on well-being
• An opportunity to shape the future of health care by joining a team recognized as a Best Place to Work for and one of the Best Companies to Work For in New York

Qualifications you'll bring:

• Bachelor's Degree or equivalent experience in Cybersecurity, Computer Science, Information Systems or related field.
• The availability to work full-time, hybrid (remote combined with in-office), and with limited travel between MVP offices, including overnight travel.

• 8+ years in leadership role is highly preferred.
• CISSP, CISM, PMP, or other industry relevant certifications preferred.
• Possess strong analytical skills with knowledge of network and security software and tools.
• Strong experience with and implementation of cybersecurity frameworks and standards, such as the NIST CSF and ISO/IEC 27001.
• Curiosity to foster innovation and pave the way for growth
• Humility to play as a team
• Commitment to being the difference for our customers in every interaction

Your key responsibilities:

• Assesses the potential impact of cybersecurity risks on critical business processes and functions.
• Working with IT teams to collaboratively implement Cyber Security Policies and Standard across the environment.
• Responsible for communicating organizational information through regular team meetings, one-on-one meetings, and appropriate written and interpersonal communication. Aligns cybersecurity risk management with overall business objectives.
• Evaluates the cost-effectiveness of cybersecurity measures in relation to potential business losses by weighing the expense of implementing security controls against the financial and operational impact of a security incident, optimize resource allocation to achieve the maximum risk reduction for the organization
• Ensures that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
• Provides knowledge and expertise in government regulatory processes and documentation, including but not limited to Risk Management Approach (RMA), National Institute of Standards and Technology (NIST) standards, and policies and procedures.
• Help identify, promote, and drive activities that will reduce organizational risk.
• Contribute to our humble pursuit of excellence by performing various responsibilities that may arise, reflecting our collective goal of enhancing healthcare delivery and being the difference for the customer.

Where you'll be:

Position is Hybrid

• Burlington Office, 62 Merchants Row, Williston, Vermont, United States of America
• Headquarters Office, 625 State Street, Schenectady, New York, United States of America
• Rochester Office, 20 S. Clinton Ave, Rochester, New York, United States of America
• Tarrytown Office, 303 South Broadway, Tarrytown, New York, United States of America