Cottage Health

Lead security governance, risk management, and compliance activities across the organization. | Minimum 3-5 years IT audit, risk management, or information security compliance experience with relevant certifications and working knowledge of HIPAA, PCI, and cybersecurity governance frameworks. | Cottage Health seeks a Governance Risk & Compliance Analyst Senior for their CH ITS Security department. This position will lead security governance, risk management, and compliance activities across the organization. This role partners with IT, business, and vendor stakeholders to identify security risks, ensure regulatory compliance, and strengthen Cottage Health's overall security program and risk management capabilities. Key responsibilities include: • Lead and maintain security governance, risk, and compliance initiatives. • Conduct security risk assessments and manage the enterprise Security Risk Register. • Support HIPAA, PCI, and other regulatory compliance activities. • Assess third-party vendors and monitor compliance with security requirements. • Develop security metrics and report risk and compliance status to leadership. • Create and maintain security policies, standards, and governance processes. • Recommend risk mitigation strategies and drive remediation efforts. All job qualifications listed indicate the minimum level necessary to perform this job proficiently. LEVEL OF EDUCATION Minimum: Bachelor's Degree in Computer Science or related field; or equivalent experience (8 years) CERTIFICATIONS, LICENSES, REGISTRATIONS Minimum: One or more of the following industry certifications: Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP),Certified in Risk and Information Systems Control (CRISC), SANS Security Awareness Professional, CompTIA Security+, CompTIA CySA+ Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), GIAC Security Essentials (GSEC), Certified Cloud Security Professional (CCSP), Systems Security Certified Practitioner (SSCP), Advanced in AI Audit (AAIA), Certified Data Privacy Solutions Engineer (CDPSE), Certified in the Governance of Enterprise IT (CGEIT), Certified Cybersecurity Operations Analyst (CCOA) TECHNICAL REQUIREMENTS Minimum: Working knowledge of HIPAA, PCI, and cybersecurity governance frameworks YEARS OF RELATED WORK EXPERIENCE Minimum: 3-5 years of IT audit, risk management, or information security compliance experience, operating independently with limited supervision Cottage Health is a leading acute care hospital system, located on the central coast of California, widely known for our superior patient care, innovation, medical research and education. Our health system operates primarily in Santa Barbara, CA, since 1888, and consists of three acute care hospitals, a Rehabilitation Hospital, multiple clinics and a multi-site Urgent Care system. Our mission is to serve the central coast communities with excellence, integrity, and compassion. Every day we touch thousands of lives in many different ways, resolute in our mission to put patients first. We take pride in helping our patients get back to living their lives - in the places they love. Cottage Health is an Equal Opportunity Employer. Cottage Health applicants are considered solely based on their qualifications, without regard to race, color, ethnicity, religion, age, gender, transgender, gender expression and identity, national origin, ancestry, disability, sexual orientation, marital status, military status or any other classification protected by law. This policy applies to all aspects of the relationship between Cottage Health and an applicant or employee. Cottage Health is committed to upholding discrimination-free hiring practices. We strive to cultivate an environment where exceptional people bring diverse perspectives and find belonging, support and connection to their work. Any Cottage Health applicants who require assistance or reasonable accommodations during the application process may request the need for accommodation with the Recruiter. • Pay for non-physician positions is determined based on related years of experience and internal equity. Eligible employees may also receive additional forms of compensation, including shift differentials, on-call pay, incentive pay, and bonus opportunities, where applicable. Manager and above positions may participate in Cottage Health’s annual management incentive program. Physician compensation is determined based upon specialty and may include bonus potential. For more information on our comprehensive Total Rewards offerings, please visit https://cottagehealth.org/careers/total-rewards. If you're already a Cottage Health employee, please apply on this link only.

Manage large-scale technical and non-technical project portfolios from concept through deployment, collaborating with senior leadership and business partners to deliver on time and budget. | Bachelor's degree and competency in project management tools with strong communication and budget/risk management skills required. | Cottage Health is seeking an Senior IT PMO Program Manager for their CH ITS Administration who is responsible for managing a variety of large scale project portfolios that fall within the technical and non-technical areas from concept through deployment. Aligned with established project methodologies, the position works collaboratively with senior leadership, IT groups, business partners, suppliers and other teams to consistently deliver portfolios on time, within scope and within budget. Cottage Health is a leading acute care hospital system, located on the central coast of California, widely known for our superior patient care, innovation, medical research and education. Our health system operates primarily in Santa Barbara, CA, since 1888, and consists of three acute care hospitals, a Rehabilitation Hospital, multiple clinics and a multi-site Urgent Care system. Our mission is to serve the central coast communities with excellence, integrity, and compassion. Every day we touch thousands of lives in many different ways, resolute in our mission to put patients first. We take pride in helping our patients get back to living their lives - in the places they love. Cottage Health is an Equal Opportunity Employer. Cottage Health applicants are considered solely based on their qualifications, without regard to race, color, ethnicity, religion, age, gender, transgender, gender expression and identity, national origin, ancestry, disability, sexual orientation, marital status, military status or any other classification protected by law. This policy applies to all aspects of the relationship between Cottage Health and an applicant or employee. Cottage Health is committed to upholding discrimination-free hiring practices.  We strive to cultivate an environment where exceptional people bring diverse perspectives and find belonging, support and connection to their work.  Any Cottage Health applicants who require assistance or reasonable accommodations during the application process may request the need for accommodation with the Recruiter. *Pay for non-physician positions is determined based on related years of experience and internal equity. Eligible employees may also receive additional forms of compensation, including shift differentials, on-call pay, incentive pay, and bonus opportunities, where applicable. Manager and above positions may participate in Cottage Health’s annual management incentive program. Physician compensation is determined based upon specialty and may include bonus potential. For more information on our comprehensive Total Rewards offerings, please visit https://cottagehealth.org/careers/total-rewards [https://cottagehealth.org/careers/total-rewards]. If you're already a Cottage Health employee, please apply on this link [https://eglz.fa.us2.oraclecloud.com/fndSetup/faces/deeplink?objType=IRC_RECRUITING&action=ICE_JOB_SEARCH_RESP] only.