IT Manager 2/Cybersecurity Audit Manager

The *** seeks a dedicated and skilled Cybersecurity Audit Manager to lead its cybersecurity auditing and compliance initiatives. This position is pivotal in ensuring ***'s compliance with federal and state regulations, protecting sensitive information, and managing cybersecurity risks. The Cybersecurity Audit Manager will be key in Producting ***'s IT infrastructure and assets while enhancing overall security practices.

The successful candidate will be responsible for:

• -Cybersecurity Risk Management: Identifying and mitigating risks to ***'s information systems and assets.
• -Policy Development and Enforcement: Establishing and enforcing security policies, standards, and procedures.
• -Auditing and Compliance: Conducting regular audits and assessments to ensure compliance with industry regulations and legal standards.
• -Vendor Risk Management: Assessing and managing third-party risks related to cybersecurity.
• -Continuous Improvement: Enhancing the cybersecurity program in response to emerging threats and evolving best practices.

Qualifications:

• In-depth knowledge of federal and state security regulations, including HIPAA and NIST frameworks.
• At least five years of experience in cybersecurity auditing, with a preference for healthcare or government environments.
• Minimum of one year of management experience.

Education:

• Bachelor's degree from an accredited institution.
• This role offers the opportunity to drive meaningful change in protecting critical health information systems while contributing to DCH's mission of improving the health and wellness of millions of Georgians.

Skills Metrics: Skill Required Amount of Experience Experience Experience in cybersecurity auditing, with a focus on healthcare or government environments Required 5 Years Management experience. Required 1 Years Bachelor's degree from an accredited college or university Required Thorough understanding of federal and state computer security and privacy laws, regulations, standards, and Controls Required Thorough understanding of HIPAA Final Security Rule, the National Institute of Standards and Technology (NIST) Required Thorough understanding of Special Publications (including 800-53 Moderate-Impact-Baseline) Required Experience with HITRUST software Required Experience with AWS Required