Director, Identity Access Management and Cyber Security Risk Management

HMSA
United States, Hawaii, Honolulu
818 Ke’eaumoku Street (Show on map)
Jan 10, 2025
IAM and Cyber Security Risk Management: Oversees and manages HMSA's IAM and Cyber Risk Management program leveraging IAM and IT Risk management best practices, industry, and frameworks. Create and maintain the IAM and Cyber Risk roadmap in accordance with the CISO's strategy. Ensure all the necessary policies and procedures in place to align with compliance requirements and the NIST framework. Develop Key Performance Indicators and SLA's for IAM and Cyber Risk Management programs; communicate these metrics with other leaders. Ensure cyber risk management team supports Enterprise IT Audits; Collaborate with Internal Audit on all Cyber Security Risk-related activities; act as the main point of contact for Cyber Security Risk. Effectively leverage HMSA Cyber Security vendors to align with HMSA's IAM and Cyber Security Risk Management strategy Ensure IAM and Cyber Risk Management related projects are completed within scope, timelines, and budget. Manage third party cyber risk management. Ensure policies and procedures are created followed. Track Corrective Action Planning. Ensure activities align with NIST requirements. Provide oversight of user and system identities, and access to data and systems throughout the HMSA enterprise. This position leads the implementation and management of IAM best practice and identity governance for in-house, vendor, and hosted solutions. Cyber Security Training and Awareness. Create, maintain policies related to Cyber Security. Prepare content and conduct training related to Cyber Security. Conduct phishing exercises/campaigns and training related to phishing risks Work with other teams such as privacy on training initiatives. Personnel Management: Provide leadership, manage, and coach cybersecurity unit staff in overall Information Security Program management. Provide management support including personnel, budget, and other administrative responsibilities, (i.e., mentoring, performance management, career planning and counseling, etc.). Manage budget to ensure the organization's cyber security program is conducted in a cost conscious and financially responsible manner. Perform all other miscellaneous responsibilities and duties as assigned or directed. #LI-Hybrid