Employment Services

We help you find the correct IT placement

So sorry, this position is no longer available. Please go ahead and submit your application. We may have other positions that would be the perfect fit for you. Alternatively, you may want to apply to one of the following related jobs:

Information Security Specialist - GRC

Kansas City, MO 64114

Posted: 05/15/2023 Employment Type: Contract Job Category: IT Manager or IT Leadership Job Number: 16086

Job Description

Adaptive Solutions Group is a premier provider of information technology personnel. We provide a variety of technical professionals available for contract, contract to hire, or direct placement positions to companies in and around the Kansas City and St. Louis areas.

We are currently looking for an Information Security Specialist to join our team.

Responsibilities
  • Promotes and enhances the maturity of the core Information Security Program functions of Governance, Risk, and Compliance (GRC). 
  • Develops and maintains information security related documentation, e.g., policies, frameworks, standards, methods & procedures, executive presentations, corporate communications, and knowledge base (KB) articles.
  • Provide principal assistance and proactively lead coordination as Information Security Manager’s designated representative for compliance related duties, e.g., scheduled reviews of internal policies and procedures, internal audits, and external audits.
  • Provide principal assistance and proactively lead coordination as Information Security Manager’s designated representative for risk related duties, e.g., contract reviews, as well as risk assessments of newly requested software or hardware.
  • Serves as a critical resource for staff and leaders regarding information security policy implementation, interpretation, and compliance.
  • Active communication with key stakeholders in Corporate Services and with Business Unit Leaders as appropriate.
  • Assesses and prioritizes information security and cybersecurity risk across the organization, facilitates compliance with regulatory requirements and information security policies, and develops and reports on information security metrics.
  • Provide principal assistance and proactively lead coordination as Information Security Manager’s designated representative for governance related duties, e.g., reviews of existing documents, as well as development of newly requested documents.
  • Provide essential support on a supplemental basis as needed and as appropriate for other key functions of the Information Security program, namely Incident Response, Vulnerability Management, as well as approved Projects or Enhancements.
  • Responsible for reducing information security and cybersecurity risk by helping to prioritize and drive remediation efforts throughout the organization.
  • Establishing and maintaining governance and compliance standards.
  • Conducting risk assessments of vendor services or products, including but not limited to software, hardware, or other professional services as applicable.
  • Creating, maintaining, communicating, and enforcing information security related documentation, e.g., policies, frameworks, standards, methods & procedures, executive presentations, corporate communications, and knowledge base (KB) articles.
  • Advising senior leadership on risk management strategies, including risk mitigation, risk reduction, risk transfer, the risk exception process and residual risk analysis.
  • Independently executes high-quality, enterprise class solutions consistent with regulations and established frameworks.
  • Holds team and organization level responsibilities and may lead small to medium scale projects. 
  • Works with employees, and leaders, as well as our clients, partners and suppliers, in select instances.
  • Develops and implements a data security risk reporting framework, aligned with designated frameworks (ISO 27001, NIST SP 800-171, etc.) for management teams and governance committees.
  • Designs and documents technical, administrative, and physical controls to ensure the business demonstrates compliance, ensuring they meet both the requirements and intent of its regulatory and compliance obligations.
  • Facilitates the remediation of control gaps and escalates critical issues to leadership.
  • Manages an exception review and approval process, and assures exceptions are documented and periodically reviewed.
  • Prepares for and facilitates examinations by qualified security assessors for regulations such as CMMC.
  • Works closely with control owners and internal and external auditors to ensure requests are completed in a timely manner.
  • Assists with the evaluation of the effectiveness of the information security program by developing, monitoring, gathering, and analyzing information security and compliance metrics for management.
  • Identifies, analyzes, evaluates, and documents information security risks and controls based on established risk criteria.
  • Conducts security risk assessments of planned and installed information systems to identify vulnerabilities and risks.
  • Recommends controls to mitigate security risks identified via risk assessment process.
  • Communicates risk findings and recommendations that are clear and actionable by business stakeholders.
  • Supports workforce security activities including culture, awareness, and training.
  • Facilitates eDiscovery and collection of data to support investigations of possible security or policy violations. 
  • Analyzes information security incidents in collaboration with other stakeholders.
  • Coordinates remediation and awareness training.
  • Researches, recommends, and contributes to information security polices, standards, and procedures. 
  • Assists with the lifecycle management of information security policies and supporting documents.
  • Works with other organizational participants to implement information security policies.
  • Performs third-party supplier risk assessments to ensure supply chain risk is managed throughout the supplier's lifecycle. 
  • Assesses and reports on the risks and benefits for the business as well as mandates for supplier compliance.
  • Articulates results of the final assessments to business stakeholders, project sponsors, program managers, and other internal parties.
  • Assists with review of information security sections within supplier contracts, identifies gaps, and recommends security and data privacy content to close gaps.
  • Maintains inventory of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities.
Preferred Qualifications
  • Associate Degree in Healthcare, Information Technology, Business, or related field (2 years of relevant experience may be considered in lieu of degree in addition to experience below).
  • Bachelor’s or Master’s degree in Healthcare, Cybersecurity, Information Technology, Engineering, Business, or related field preferred.
  • Demonstrated success performing risk assessments, writing policies to comply with governmental regulations, or implementing other key GRC functions.
  • Demonstrated success leading small to medium scale projects.
  • 5-7 years of progressively responsible experience in a healthcare setting, addressing risk and compliance with regulatory requirements (e.g., ISO 27001, SOC 2, PCI DSS, FedRAMP,).
  • Advanced certifications such as HCISSP, CISSP, CEH, CISM, CISA, CCSP, and/or specific training and certification in security risk management and IT controls frameworks, such as NIST CSF and 800-53 and 800-171.
Adaptive Solutions Group offers a competitive compensation and benefits package that includes medical, dental, STD/LTD, life insurance coverage, 401k, paid vacation, and holidays.

Adaptive Solutions Group is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, and veteran or disability status.

Job Requirements

ISO, GRC

Meet Your Recruiter

Abby Tryon

Apply Online Apply with LinkedIn Apply with Facebook Apply with X

Send an email reminder to:

Share This Job:

Related Jobs:

Login to save this search and get notified of similar positions.

About Kansas City, MO

Ready to take the next step in your career? Explore exciting job opportunities in the vibrant city of Kansas City, Missouri, where endless growth possibilities await! Known for its thriving arts scene, including the Nelson-Atkins Museum of Art and the Kauffman Center for the Performing Arts, along with its iconic BBQ cuisine, such as Gates BBQ and Joe's Kansas City, this area offers a unique blend of culture and charm. Cheer on the Kansas City Chiefs or Kansas City Royals at Arrowhead Stadium or Kauffman Stadium, or enjoy outdoor activities at the beautiful Loose Park or along the scenic Missouri River. Discover why Kansas City, MO is the perfect place to advance your career and experience a rich and dynamic lifestyle.