Platzhalter Bild

Hybrid Governance Analyst III na ModivCare

ModivCare ·  Denver, United States Of America · Hybrid

Candidatar-se agora Logo

Oyster – Contrate globalmente com a Oyster. Simplifique o processamento de salários e a conformidade.

Patrocinado por Oyster

Are you passionate about making a difference in people's lives? Do you enjoy working in a service-oriented industry? If so, this opportunity may be the right fit for you!

This position is responsible for the execution of projects, reviews, audits, and governance requests related to IT security frameworks, policies, and standards, which includes the application of technical knowledge and tools to enhance and improve IT governance practices and principles to increase assurance of continuous compliance. This role will require creating and implementing work processes that follow organizational standards, engaging stakeholders across the organization to drive engagement and completion of tasks related to security remediation, policies, awareness, and governance practices, as well as communication across the organization and require collaboration with leadership and staff throughout the organization.

This role...

  • Develops and optimizes IT governance frameworks, policies, and procedures to ensure compliance with globally accepted industry standards and regulations, such as NIST CSF or ISO 27000.

  • Effectively maps security frameworks, including compliance and security frameworks, to internal policies, controls, and procedures (NIST, HITRUST, ISO 27001/ 27701).

  • Supports documentation and improvement of processes to identify risks and remediate vulnerabilities.

  • Assists in developing desktop policies, processes, and procedures to support internal and external audit control testing, including but not limited to HIPAA, SOX, HITRUST, and ISO.

  • Documents, streamlines, and implements controls to support compliance for HIPAA, SOX, ISO, and HITRUST.

  • Regularly documents and updates the control environment to ensure it is operating effectively and efficiently.

  • Supports the timely execution of IT General Control testing activities as required.

  • Maintains ongoing audits of governance processes to update and optimize policies and procedures.

  • Periodically reports metrics related to measurement and reduction of organizational risk.

  • Develops, monitors, regularly reports, and ensures adherence to OKRs & KPIs for IT governance.

  • Conducts training sessions to ensure the understanding of risks & controls for which business users are responsible.

  • Documents, tests, trains employees, and executes responses to cyber security breaches.

  • Develops communication plans and technical recovery plans based on defined risk and impact on the organization.

  • Collaborates with internal and external auditors to facilitate audits and ensure compliance with regulatory requirements.

  • Communicates project objectives and prepares reports/presentations on IT governance initiatives/projects, findings, appropriate resolution plans/recommendations for senior management and stakeholders.

  • Assists in the development and management of all IT plan of actions and milestones.

  • Ensures all customer compliance commitments are met at all times.

  • Stay up to date on emerging technologies and industry trends in IT governance.

  • May lead projects and perform other duties as assigned.

  • Occasional business travel may be required.

We are excited to speak with individuals with the following...

  • Bachelor’s Degree in Computer Science, Computer Engineering, or Information Security/Cyber Security, or related field required.

  • Five (5) plus years of experience in Information Security Governance or risk management.

  • ISC (2) CISSP certificate preferred.

  • ITIL & GIAC certificates a plus.

  • Or equivalent combination of education and/or experience.

  • Solid understanding of IT governance frameworks, industry standards, and best practices (e.g., NIST CSF, ISO 27001)

  • Strong knowledge of regulatory requirements and compliance (e.g., HIPAA, HITRUST, SOX, AICPA SOC)

  • Experience with audit processes/methods, goals, motivations, and achieving desired outcomes.

  • Proficient in analyzing complex IT systems, processes, and infrastructure.

  • Ability to build and maintain easy-to-understand, follow, and audit policies, procedures, controls, narratives, and other common components of an enterprise IT GRC program.

  • Strong problem-solving and analytical skills, with keen attention to detail.

  • Excellent verbal and written communication skills, with the ability to effectively interact with stakeholders at all levels.

  • Ability to identify and seek needed information/research skills.

  • Proficient in Microsoft Suite products (Outlook, Word, Excel, PowerPoint).

Salary: $ 81,000.00 - 111,400.00

Modivcare’s positions are posted and open for applications for a minimum of 5 days. Positions may be posted for a maximum of 45 days dependent on the type of role, the number of roles, and the number of applications received.  We encourage our prospective candidates to submit their application(s) expediently so as not to miss out on our opportunities. We frequently post new opportunities and encourage prospective candidates to check back often for new postings. 


We value our team members and realize the importance of benefits for you and your family.

Modivcare offers a comprehensive benefits package to include the following:

  • Medical, Dental, and Vision insurance
  • Employer Paid Basic Life Insurance and AD&D
  • Voluntary Life Insurance (Employee/Spouse/Child)
  • Health Care and Dependent Care Flexible Spending Accounts
  • Pre-Tax and Post --Tax Commuter and Parking Benefits
  • 401(k) Retirement Savings Plan with Company Match
  • Paid Time Off
  • Paid Parental Leave
  • Short-Term and Long-Term Disability
  • Tuition Reimbursement
  • Employee Discounts (retail, hotel, food, restaurants, car rental and much more!)

Modivcare is an Equal Opportunity Employer.

Candidatar-se agora

Outros empregos