Remote

Cyber Security Program Manager, Senior

Blue Cross and Blue Shield of Kansas City
parental leave, paid time off, paid holidays, tuition reimbursement, 401(k), employee discount
United States, Missouri, Kansas City
2301 Main Street (Show on map)
Jan 07, 2025
Guided by our core values and commitment to your success, we provide health, financial and lifestyle benefits to ensure a best-in-class employee experience. Some of our offerings include: Highly competitive total rewards package, including comprehensive medical, dental and vision benefits as well as a 401(k) plan that both the employee and employer contribute Annual incentive bonus plan based on company achievement of goals Time away from work including paid holidays, paid time off and volunteer time off Professional development courses, mentorship opportunities, and tuition reimbursement program Paid parental leave and adoption leave with adoption financial assistance Employee discount program Job Description Summary: The Cyber Security Program Manager, Senior will develop help plan, drive, and implement comprehensive Information and Cyber Security strategies. This role involves ensuring compliance with industry regulations, safeguarding sensitive patient data, and overseeing budget and resource allocation. The Cyber Security Program Manager, Senior will report directly to the CISO and under their guidance work closely with various stakeholders to enhance the organization's security posture and mitigate cyber risks. Job Description Through cross functional teamwork and collaboration across the organization, develop and implement Information and Cyber Security strategies, solutions and policies. Oversee the lifecycle management and operation of cybersecurity programs, including risk management, vulnerability management, identity and access management, supplier risk management, and security control assessments. Ensure compliance with healthcare industry regulations, such as HIPAA, HITECH, and other relevant standards. Assist with after action reviews and continuous improvement opportunities involving incident response and recovery efforts in the event of a cybersecurity event. Collaborate with IT, compliance, and other departments to align cybersecurity initiatives with organizational goals. Assist with overseeing regular security audits and assessments to identify and address potential vulnerabilities. Assist in the development and delivery of training programs to educate staff on cybersecurity best practices and awareness. Assist in preparing reports to senior management, highlighting the status of cybersecurity initiatives and any emerging threats. Oversee budget management, ensuring efficient allocation of resources to cybersecurity projects and initiatives. Manage vendor relationships, including negotiation of contracts and monitoring performance. Stay updated on the latest cybersecurity trends, threats, and technologies relevant to the healthcare sector. Develop detailed program plans, track progress against project objectives, milestones and program financials, and manage changes in scope, schedule and cost. Maintains continuous alignment of program scope with strategic business objectives while making recommendations to modify the program to enhance effectiveness toward the business result or strategic intent. Coordinates business, IT, and external vendors participation in program outcomes. Builds credibility, establishes relationships and rapport, and maintains communication with stakeholders at multiple levels, including those external to the organization using program level status and other communication tools. Identifies program resourcing needs and generates and manages requests for external resources. Identify risks and facilitate remediation ideas, gaining buy-in from key stakeholders and impacted areas. Create clear and concise documentation that can be understood and followed across company departments. Minimum Qualifications Bachelor's degree in IT, Cyber, Computer Science, Engineering, related field 10 years in IT, InfoSec, Cybersecurity, project, program, portfolio management, technology product management PMP certification Proven track record of managing complex and multi-faceted cybersecurity projects. Strong analytical and problem-solving abilities. Excellent communication and presentation skills. Ability to work in a fast-paced and dynamic environment. Experience with various compliance and regulatory audits such as NIST, SOC, PCI, etc. Experience with cybersecurity frameworks such as NIST, ISO 27001, and CIS Controls is a plus. Preferred Qualifications Master's degree in Information Assurance, Information Security, related field ScrumMaster, Six Sigma, ITIL, CISM, CISSP certification Knowledge of healthcare industry regulations and compliance requirements. Experienced in budget planning and forecasting. Experienced in vendor and supplier contract and risk management. Experience creating executive and board level updates and presentations. Blue Cross and Blue Shield of Kansas City is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability.