Coordinates IT security compliance at a medical school: creates and maintains the policies, documentation, internal audits, and compliance scorecards needed to meet NIST CSF and regulations like HIPAA, FERPA, and GLBA, and serves as liaison to auditors. Salaried hybrid role in Kalamazoo, MI with required on-site attendance.
The IT Security and Compliance Coordinator is responsible for organizing and managing the documentation and processes required to ensure compliance with The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and all requirements defined by applicable regulations (e.g. HIPAA, FERPA, GLBA), contracts, or accreditation standards.
Please Note this is a Salaried Hybrid Position that will require on-site attendance. (MI residents only or willing to relocate - at their expense, to Michigan)
This position is NOT eligible for employer-sponsored work authorization (visa sponsorship), now or in the future.
To share this job posting, please use this link.
BENEFITS
Wellness reimbursement.
Continuing education and tuition reimbursement.
Employer-funded retirement plan.
Two medical plan options: PPO and High Deductible Health Plan (HDHP) with employer HSA contribution.
Flexible work solutions based on position and department.
Up to four weeks of PTO accrual beginning in year one.
Paid holidays.
Paid volunteer time.
Paid preferred holiday.
DUTIES AND RESPONSIBILITIES:
Works with organizational and IT Leadership to create, implement, and monitor security compliance policies, procedures, and processes.
Creates and maintains administrative documentation and reports required to demonstrate compliance with applicable regulations, contracts, and accreditations.
Educate staff, students, faculty, and residents on security procedures and practices through multiple mediums.
Collaborate with IT staff to implement new policies, procedures, or controls based on current trends and new or upcoming requirements.
Support IT Leadership reviewing contracts and agreements for technical requirements and compliance with existing obligations and requirements.
Initiate periodic internal assessments of organizational compliance with existing obligations and requirements.
Collaborate with technical staff and system owners to remediate or mitigate gaps identified during audits.
Maintain “Compliance ScoreCards” to provide leadership insight into current compliance posture and gaps.
Creates and manages documentation for incident response.
Act as liaison between WMed administrative teams and auditors
All other duties as assigned.
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.
EDUCATION AND/OR EXPERIENCE:
Associate's degree in information systems, cybersecurity, compliance, or other related field or two years related experience supporting security standards and/or regulatory compliance standards.
Experience auditing processes and/or documentation against a given standard.
ADDITIONAL PREFERRED SKILLS:
Solid knowledge of regulatory standards (HIPAA, FERPA, GLBA, etc)
Possess excellent verbal and written communication skills and are able to navigate in an environment with both highly technical and highly non-technical individuals.
Experience creating security policies and understanding best practices.
Knowledge of current and emerging security/compliance threats.
Have passion for technology, security and innovation.
Want to work with a fast-paced project team focused on compliance.
LICENSES, REGISTRATIONS, CERTIFICATIONS:
AIHC Certified HIPAA Compliance Officer certification preferred or must beobtained within 12 months ofhire
OTHER SKILLS AND ABILITIES:
Ability to organization and manage tasks, projects, and documentation to meet audit requirements.
Knowledge and proficiency in grammar and spelling.
Ability to quickly learn software packages as needed.
Ability to effectively communicate with others verbally and in writing.
Ability to meet assigned deadlines.
Ability to interpret, comprehend, and transmit complicated and detailed instructions accurately.
Demonstrate the ability to recognize priorities in organization of work flow.
Able to perform duties independently, with a minimal need for direct supervision.