Sr Analyst, Cybersecurity Governance and Risk Services

Do you envision finding a meaningful role with an inclusive and compassionate team? At Children's Mercy, we believe in making a difference in the lives of all children and shining a light of hope to the patients and families we serve. Our employees make the difference, which is why we have been recognized by U.S. News & World Report as a top pediatric hospital, for eleven consecutive years.

Children's Mercy is in the heart of Kansas City - a metro abounding in cultural experiences, vibrant communities and thriving businesses. This is where our patients and families live, work and play. This is a community that has embraced our hospital and we strive to say thanks by giving back. As a leader in children's health, we engage in meaningful programs and partnerships throughout the region so that we can improve the lives of children beyond the walls of our hospital.

The Senior Governance and Risk Services (GRS) Analyst oversees the ongoing maintenance of Cyber Governance and Risk Management operations. Senior Analyst implements new processes and procedures to ensures alignment to industry best practices and security standards. Senior GRS Analyst can recommend cyber projects and provides direction to management on Cyber Governance and Risk matters. Senior Analyst evaluates cyber solutions to determine the feasibility of solution capabilities to meet cybersecurity needs and requirements. Serves as an internal escalation point to support and develop other members of the team.

At Children's Mercy, we are committed to ensuring that everyone feels welcomed within our walls. A successful candidate for this position will join us as we strive to create a workplace that reflects the community we serve, as well as our core values of kindness, curiosity, inclusion, team and integrity.

Additionally, it's important to us that we remain transparent with all potential job candidates. Because we value the safety of the patients and families we serve, as well as the Children's Mercy staff, we want to let you know that the seasonal influenza vaccine is a condition of employment for all employees in our organization. New employees must be willing to be vaccinated if found non-immune to measles, mumps, rubella (MMR) and chicken pox (varicella) and/or without evidence of tetanus, diphtheria, acellular pertussis (Tdap) vaccination since 2005. If you are selected for this position, you will be asked to supply your immunization records as proof of vaccination. If you and have any concerns about receiving these vaccines, medical and/or religious exemptions can be further discussed with Human Resources.

Provides review and recommendations for Cyber Governance and Risk processes and procedures and creates recommendations for risk resolution:

Evaluates IS documents for accuracy.
• Ensures alignment to industry best practices and CM's minimum security standards.
• Provides current policy guidance to end users and creates documentation for the remediation of audit findings or policy violations.

Makes recommendations and creates effective presentation materials for improvements in Cyber Governance and security standards:

• Communicates with departmental personnel and leadership to ensure effective deployment of technologies.
• Finds cost-effective solutions to new and existing technical needs.
• Contributes to the renewal of existing solutions and the review and consideration of new or replacement solutions.
• Appropriately tailors communications to the intended audience in order to provide assistance and guidance to peers and leadership with regard to departmental processes and initiatives.

Represents Cybersecurity as a technical and process resource at departmental and company-wide collaborations:

• Represents Cyber GRS in architectural discussions, project meetings, governance committees, and ad hoc discussions as appropriate.
• Is able to step in and create solutions for incidents or outages on behalf of Cybersecurity Governance and Risk Management.
• Participates in the evaluation of cyber solutions to determine the feasibility of solution capabilities to meet cybersecurity needs and requirements.

Bachelor's Degree in related field and 5-7 years experience in cybersecurity, governance, and risk services or related roles. OR

High School diploma, or equivalent, and 9+ years' experience in cybersecurity, governance, and risk services or related roles. Preferred certifications and/or additional years of directly related work experience may be considered in lieu of Bachelors Degree.

Preferred Certifications:

• HealthCare Information Security and Privacy Practitioner (HCISPP) Preferred
• CSX Cybersecurity Practitioner (CSX-P) certification Preferred
• Governance, Risk, and Compliance Professional (GRCP) certification Preferred
• GRC Auditor (GRCA) certification Preferred
• Certified Internal Auditor (CIA) Preferred
• Certified Information Systems Security Professional (CISSP) Preferred

The benefits plans at Children's Mercy are one of many reasons we are recognized as one of the best places to work in Kansas City. Our plans are designed to meet the changing needs of our employees and their families.

Our pay ranges are market competitive. The pay range for this job begins at $39.59/hr, but your offer will be determined based on your education and experience.

This position is entirely remote or work-from-home. The person hired must live in the Kansas City metro area and may attend on-site meetings, as scheduled.

Children's Mercy hires individuals based on their job skills, expertise and ability to maintain professional relationships with fellow employees, patients, parents and visitors. A personal interview, formal education and training, previous work experience, references and a criminal background investigation all are factors used to select the best candidates. The hospital does not discriminate against prospective or current employees based on the race, color, religion, sex, national origin, age, disability, creed, genetic information, sexual orientation, gender identity or expression, ancestry or veteran status. A drug screen will be performed upon hire. Children's Mercy is smoke and tobacco free.

CM is committed to creating a diverse and inclusive workforce. Our patients and families come from all walks of life, and so do we. We know that our greatest strengths come from the people who make up our team so we hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our hospital stronger and our patient care more compassionate.

If you share our values and our enthusiasm for service, you will find a home at CM. In recruiting for our team, we welcome the unique contributions that you can bring, including education, ideas, culture, ethnicity, race, sex, sexual orientation, gender identity and expression, national origin, age, languages spoken, veteran status, color, religion, disability and beliefs.