Sr Security Policy Analyst

Overview

BJC Healthcare is a large nonprofit health care organization serving residents in the St. Louis, southern Illinois, and southeast Missouri regions. With over 30,000 employees and net revenues of $6.3 billion, BJC delivers services including inpatient and outpatient care, primary care, community health, workplace health, home health, community mental health, rehabilitation, long-term care, and hospice. BJC is the largest provider of charity care and community benefits in Missouri, contributing $785.9 million annually.

Responsibilities

• Present proposed policy changes to Senior IT management, executive team members, EISC, and ISOC both verbally and in writing.
• Administer the policy management solution and support the Governance Risk and Compliance tool, including:
• Updating and maintaining existing policies
• Provisioning policy administration access
• Periodic validation of policy administration access
• Policy administration change management processes and monitoring
• Identify gaps and redundancies in the current IT policy structure and implement necessary changes.
• Ensure compliance with the NIST Cybersecurity framework, NIST 800-53, and relevant regulatory provisions (HIPAA, HITECH, PCI DSS).
• Implement and maintain a project plan for revising and consolidating the existing policy structure to align with strategic clinical and business objectives, address organizational risks, regulatory requirements, and security needs.
• Provide policy revisions based on monitored threats and regulatory environments.
• Liaison to BJC Compliance and Legal departments to incorporate required policy provisions into the existing structure.
• Lead consultant to all IT Security teams to incorporate security and control requirements into the existing policy structure.

Requirements

• Education: Bachelor's Degree
• Experience: 2-5 years
• Preferred Requirements: 5-10 years
• Licenses & Certifications: CIAC, ISACA CISM, Certified in Risk & Information Systems Control

Qualifications

• Excellent writing skills
• Knowledge of compliance
• Attention to detail

Skills

• Understanding of the organization's requirements and desired audience
• Evaluating different publishing methods and options, including open source and proprietary
• Developing and overseeing the implementation and maintenance of revisions to a framework for content publishing
• Converting content into formats suitable for publication
• Managing copyright, data protection, and other legal issues associated with publishing and reusing published information and data
• Ensuring published material is accessible to all potential users, including those with disabilities
• Releasing or retiring content

Benefits

• Comprehensive medical, dental, vision, life insurance, and legal services
• Disability insurance
• 4% BJC Automatic Retirement Contribution
• Tuition Assistance
• Health Care and Dependent Care Flexible Spending Accounts
• Paid Time Off benefit combining vacation, sick days, holidays, and personal time
• Adoption assistance