Continuously look to optimize processes, technology and capabilities through tactical and strategic development.

Other duties as assigned.

Knowledge And Skills

Strong analytical skills;
Demonstration of ability to solve problems using best practices and systematic approach
Relationship builder; able to create and maintain a trusted network on all levels;
Good communication, influencing and negotiating skills;
Written and oral communication skills including the ability to communicate complex technical issues to non-technical staff;
Project management and organizational skills;
Tactful and diplomatic when engaging with all levels of management always maintaining a professional demeanor.

Required Experience

5-8 years direct experience with information security, IT controls assurance and IT audit facilitation
Working knowledge of industry standards such as NIST Cybersecurity Framework, FedRAMP, NIST SP 800-53, ISO 27001, Sarbanes-Oxley, SOC1, SOC2, HIPAA, HITRUST and other similar frameworks.

Preferred Experience

Experience in cloud-based environments for production applications, including Amazon Web Services, Microsoft Azure, GCP or other large-scale cloud deployment.
Understanding of attack vectors and methodologies.
Ability to weigh business risks and enforce appropriate information security measures.
CISSP, CISM, CISA, CCSA or equivalent certification preferred.

Proficient in the use of Microsoft Office (Excel and PowerPoint), Power BI and Power Automate.

GHX: It's the way you do business in healthcare

Global Healthcare Exchange (GHX) enables better patient care and billions in savings for the healthcare community by maximizing automation, efficiency and accuracy of business processes.

GHX is a healthcare business and data automation company, empowering healthcare organizations to enable better patient care and maximize industry savings using our world class cloud-based supply chain technology exchange platform, solutions, analytics and services. We bring together healthcare providers and manufacturers and distributors in North America and Europe - who rely on smart, secure healthcare-focused technology and comprehensive data to automate their business processes and make more informed decisions.

It is our passion and vision for a more operationally efficient healthcare supply chain, helping organizations reduce - not shift - the cost of doing business, paving the way to delivering patient care more effectively. Together we take more than a billion dollars out of the cost of delivering healthcare every year. GHX is privately owned, operates in the United States, Canada and Europe, and employs more than 1000 people worldwide. Our corporate headquarters is in Colorado, with additional offices in Europe.

Disclaimer

Global Healthcare Exchange, LLC and its North American subsidiaries (collectively, “GHX”) provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, national origin, sex, sexual orientation, gender identity, religion, age, genetic information, disability, veteran status or any other status protected by applicable law. All qualified applicants will receive consideration for employment without regard to any status protected by applicable law. This EEO policy applies to all terms, conditions, and privileges of employment, including hiring, training and development, promotion, transfer, compensation, benefits, educational assistance, termination, layoffs, social and recreational programs, and retirement.

GHX believes that employees should be provided with a working environment which enables each employee to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, national origin, sex, sexual orientation, gender identity, religion,

Senior Cybersecurity Risk Governance Analyst

Job Type