Harvard Pilgrim Health Care is consistently ranked among the nations top health plans. We work together to improve the health of the people we serve and the health of society. Being part of the Harvard Pilgrim team means that you excel at what you do. You're dedicated to your work and continually look for new ways to serve your customers better. We believe in a healthy balance of work and personal life. We do our best to support our employees in making the most of their lives both inside and outside of work. We have an excellent benefit package and are "T" accessible.
Harvard Pilgrim is an equal opportunity employer and does not discriminate in employment on the basis of race, religion, gender, gender identity, age, sexual orientation, national origin, or veteran or disability status. Harvard Pilgrim complies with all applicable laws concerning hiring and employment practices.
DESCRIPTION OF WORK:
Develop and manage a security compliance program in accordance with federal and state regulations, security best practices, security controls procedures, and established security control frameworks, e.g. ISO 27001 – 27003, COBIT.
Evaluate, recommend, and implement a security governance, risk, and compliance tool to support the security compliance program for the Office of Information Security.
Assess and recommend area of security risk to Harvard Pilgrim Health Care.
Evaluate, recommend and implement changes to our current security compliance activities.
Coordinate with, and direct Dell Perot Systems IT staff in the management, support, and compliance of security business controls across the IT infrastructure.
Communicate and market the security compliance activities performed by the Office of Information Security.
Interface with Harvard Pilgrim business groups and corporate compliance and risk personnel to ensure the integration of security compliance activities meet the needs of the business, and are aligned with HPHC’s corporate compliance program.
Requirements:
Ten years of direct experience in security, focusing on defining security governance, policy, procedures, and security controls to assure that all security-related business, compliance and regulatory guidelines are met.
Strong working knowledge of HIPAA, HITTECH ACT, Mass Data Breach Law, NIST, ISO27002, 27799, COBIT, ITIL and Information Security Best Practices.
Experience within healthcare and familiarity with the health care/managed care data model is a plus.
Bachelor’s degree - relevant experience may be considered.
