Director, Security - GRC

Concentra is recognized as the nation’s leading occupational health care company.

With more than 40 years of experience, Concentra is dedicated to our mission to improve the health of America’s workforce, one patient at a time. With a wide range of services and proactive approaches to care, Concentra colleagues provide exceptional service to employers and exceptional care to their employees.

The Director, Security - GRC (Governance, Risk Management, and Compliance) will lead the efforts in maintaining compliance with various regulatory and security frameworks. This role requires a deep understanding of security, compliance, regulatory frameworks, platform management, vendor security reviews, third party risk management and customer interactions. Requires a strong ability to collaborate across functions and provide valuable insights and leadership in enhancing our security and compliance environment (s)

• .

  Create and maintain Security Compliance polici

• esPerform security risk assessments to identify gaps, develop recommendations and close the gaps to completion and resoluti

• onLead and maintain and Third Party Risk Management (TPRM) progr

• amSetup Internal audit processes for various security nee

• dsOversee platform security compliance audits for new regions to comply with legal regulatio

• nsProject management that includes the knowledge to initiate and drive complex security projects requiring various stakeholde

• rsDevelop metrics to track security program effectiveness and to report ri

• skCreate a governance program for different security areas like Infrastructure, Application, SOC and othe

• rsIdentify critical security audit areas, establish the audit process and have completed audit of few are

• asCreate and update security risk metrics to measure the risk levels across systems and process

• esConduct security awareness and educational trainings for the company and specific tea

• msFacilitate and participate in internal audits of critical processes and as required for PCI and S

• OXComplete risk assessments of high-risk processes and come up with gaps and recommendatio

• nsRollout security awareness trainings for the company and GRC te

• am

  Education Level: Bachelor’s Degree Major: Computer Science, Information Secur

• ityMinimum of 8-10 years of experience related to risk managem

• entThree to four years of project management experie

• nceExperience developing GRC programs in a cloud and SaaS environme

• nt.Concentra Core Competencies of Service Mentality, Attention to Detail, Sense of Urgency, Initiative and Flexibil

• ityAbility to make decisions or solve problems by using logic to identify key facts, explore alternatives, and propose quality soluti

• onsOutstanding customer service skills as well as the ability to deal with people in a manner which shows tact and professional

• ismThe ability to properly handle sensitive and confidential information (including HIPAA and PHI) in accordance with federal and state laws and company polic

• iesExperience with privacy frameworks, such as SOX, SOC2 Type 2, PCI, NIST and HI

• PAAExperience with third party risk managem

• entStrong collaborator, with experience working on teams composed of both technical and non technical memb

• ersDemonstrated ability to lead large projects, problem-solve, multitask, and have excellent organizational ski

• llsExcellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal collaborators and external audit

• orsThrive in a data-driven, fast-paced and innovative environm

• entStrong prioritization skills and the ability to handle multiple job duties in a fast-paced environm

• entExceptional communication skills and the ability to communicate appropriately at all levels of the organization, written and ver

bal