Governance Risk and Compliance Analyst - Blue Cross Blue Shield Association Chicago, IL, USA Bookmark Share Print 668 1 10

Listing Description

The Governance Risk Compliance Analyst provides the thought leadership in the discipline of Privacy and is responsible for establishing and maintaining privacy processes, policies, standards, and procedures.  The Governance Risk Compliance Analyst supports privacy investigations and incident response and leads efforts to train and drive awareness entity wide on privacy practices. Required Basic Qualifications

Minimum of 5 years in a privacy, information security, planning, administration, audit, or resource and compliance management role.

Bachelor degree in Information Technology or related field required.

Must have a full understanding of legal and regulatory requirements relating to Privacy in the healthcare sector including Federal and State legislative mandates and requirements to safeguard Protected Health Information (PHI) and/or Personally Identifiable Information (PII). This also includes experience with the Health Insurance Portability and Accountability Act (HIPAA).

Experience supporting privacy initiatives; implementing or maintaining policies, processes and procedures; and implementing training and awareness programs.

Experience with unified control frameworks, policy management, internal/external audit management, and data loss prevention.

Working experience in managing 3rd party risk.

Experience in working with GRC technology (e.g., Logicgate, Whistic).

Working knowledge of integrating security compliance requirements and artefacts into the project management lifecycle and SDLC.

Preferred Basic Qualifications

Knowledge and experience in project and change management.

Knowledge of the BCBS system and practices.

Knowledge of vendor management and contract administration.

MBA or MS degree.

Blue Cross Blue Shield Association is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, national origin, age, gender identity, disability, veteran status, genetic information or any other legally protected characteristics