Information Security Risk and Governance Specialist, Principalnew

Your Role

 

The Trust Assurance Services team drive BSC information security adherence to regulatory standards, as well as policies, standards, and controls (mainly access controls) with the goal of safeguarding company assets and maintaining confidentiality, integrity, and availability of information. The Access Management, Principal will report to the Senior Manager, IT Controls in Information Security, Risk and Operations division. In this role you will execute a robust Access Management program focused on security and be part of a team of professionals to ensure Blue Shield access and security controls are operating effectively.

Your Work

 

In this role, you will:

 

• Provide subject matter expertise, thought leadership, guidance, best practice and support across access and identity management, security, and the governance risk functions

• Drive access and identity management improvements by partnering with the business and technical stakeholders

• Be responsible for entire product delivery as technical controls industry subject matter expert

• Responsible for documenting and disseminating technical control framework, standards, templates, and tools

• Develops program status, metrics, and other reporting needs for various management levels

• Operate identity and access management procedures and processes as required 

• Document, socialize, and educate access management requirements across the enterprise 

Your Knowledge and Experience
 

• Requires a bachelor's degree or equivalent experience

• Requires at least 10 years of prior relevant experience

• Required Project Management Professional Certification (PMP) or equivalent

• Requires hands-on experience with access and identity management tools and frameworks

• Requires great written and verbal communication skills and ability to present to C-Suite

• Requires knowledge SailPoint or other identity and access management tool and ServiceNow or other CMDB tool

• Desired experience in resolving incidents involving access issues

 

#LI-CP4