IT Security Risk Manager

About the role

The IT Security Risk Manager is a key member of the Enterprise Risk Management team within the Tarrant County Hospital District’s Office of Legal Affairs. Reporting to the Deputy General Counsel, this role is responsible for leading the identification, assessment, monitoring, and mitigation of information technology and security risks across the health system. The IT Security Risk Manager plays a critical role in ensuring that information systems are appropriately protected and aligned with applicable regulatory requirements, industry standards, and internal policies.

Responsibilities

• Conducts risk assessments and reviews of the IT control framework to identify control gaps and risk exposures.
• Partners with IT, cybersecurity, infrastructure, and business leaders to assess and reduce technology and security risk.
• Provides risk guidance and recommendations for new initiatives, technologies, system implementations, and significant system changes.
• Facilitates IT security risk workshops, training sessions, and awareness programs for employees and stakeholders.
• Assists with cybersecurity incident investigations, including root cause analysis and remediation tracking.
• Participates in business continuity and disaster recovery planning, testing, and evaluation activities.
• Recommends and evaluates controls to enhance system resilience and minimize operational and security impact.
• Identifies and supports the implementation of practical and cost-effective solutions to IT security and risk issues.
• Provides aggregated risk oversight and supervision for high-impact IT service areas.
• Develops, analyzes, and presents reports on key IT risk metrics, assessments, and activities to management and stakeholders.
• Builds and maintains effective working relationships with risk team members