Lead, Third Party Cyber Security Risk Management

Humana is a healthcare company seeking a Lead, Third Party Cybersecurity Risk Management professional to design and manage strategies for mitigating cybersecurity risks introduced by vendors and partner organizations. The role develops and executes third-party risk management plans, oversees key platform environments, advises stakeholders and executives, and leads risk management activities across the enterprise.

Responsibilities:

• Works with relevant stakeholders to identify gaps in third-party security architecture and develops a third-party cybersecurity risk management plan
• Manages Production and UAT environments for key platforms
• Responsible for continued build-out and execution of the program in alignment with strategic and tactical transformation plans, as well as centralizing the management of risk throughout the vendor lifecycle and across the enterprise
• Increases visibility to the business to pull them into the reporting and remediation of risk while driving risk-based decision making
• Works with and advises internal and external industry executives to develop functional and enterprise-wide strategies
• Advises executives to develop functional strategies (often segment specific) on matters of significance
• Leads a team in determining methods and procedures for new and reoccurring third-party risk management tasks across the different enterprise tenants
• Works with external account managers and Humana systems engineering teams to develop and mature a cohesive, integrated third-party risk management tool methodology and capability across Humana
• Negotiates contract language
• Exercises independent judgment and decision making on complex issues regarding job duties and related tasks and works under minimal supervision
• Uses independent judgment requiring analysis of variable factors and determining the best course of action

Requirements:

• Bachelor's Degree Computer Science, Information Technology, Software Engineering, or any other technical field
• 8+ years of system engineering/technical experience
• 2+ years of Agile/Project Management
• 3+ years hands-on experience with building out and managing OneTrust
• OneTrust certification in Solution Foundations and Lifecycle Operations