Third Party Cybersecurity Risk Manager (remote) - Work at Home - Kentucky

Become a part of our caring community and help us put health first
 ** **Role is eligible for Avenues Program


The Third Party Cybersecurity Risk Manager 2 designs and manages strategies and initiatives to manage cybersecurity risks from third-party (i.e., Humana vendors, partner organizations, etc.) entities that may introduce risk to Humana’s cybersecurity risk posture. The Third Party Cybersecurity Risk Manager 2 work assignments are varied and frequently require interpretation and independent determination of the appropriate courses of action.

The Third Party Cybersecurity Risk Manager 2 works with relevant stakeholders to identify gaps in third-party security architecture and develops a third-party cybersecurity risk management plans. This work includes performing assessments of third parties. Understands department, segment, and organizational strategy and operating objectives, including their linkages to related areas. Makes decisions regarding own work methods, occasionally in ambiguous situations, and requires minimal direction and receives guidance where needed. Follows established guidelines/procedures.
Use your skills to make an impact
 

Required Qualifications:

• Associate’s Degree required, preferably in Cybersecurity, Computer Science, Management Information Systems or equivalent technical experience or 3+ years of relevant experience in Cybersecurity and/or technology field (e.g., Cybersecurity, IT or Advisory).
• Conceptual knowledge of the HITRUST Framework, NIST Cybersecurity Framework or similar Cybersecurity Framework.
• Effective organizational and prioritization skills.
• Ability to communicate clearly, effectively, persuasively and credibly with internal management and external senior level oversight entities.

Preferred Qualifications:

• Bachelor’s degree, preferably in Cybersecurity, Computer Science, Management Information Systems or equivalent computer or applicable business-related field.
• 1+ years’ experience performing risk assessments and risk remediation planning using a NIST, HITRUST OR SIG question base/assessing third party supplier security risk is preferred (e.g. compliance, audit, or Cybersecurity).
• Professional certification preferred (e.g. Security+, CISA, …