Apply on Employer Site

Blue Cross Blue Shield Association · 1 month ago

Senior Cybersecurity Risk Lead Consultant

Chicago or Washington, D.C.

Full-time

Onsite

Senior Level, Lead/Staff

$144K/yr - $207K/yr

10+ years exp

Blue Cross Blue Shield Association is seeking a Senior Cybersecurity Risk Lead Consultant to lead the development and implementation of cyber risk management processes. The role involves aligning cyber risk strategies with organizational goals, managing risk at various levels, and providing leadership for multiple projects within the cybersecurity domain.

CommunitiesInsurance

H1B Sponsor Likely

Responsibilities

Lead the creation and deployment of defined and structured processes to support evolving and maintaining the cyber risk management program

Work across the BCBSA organization to align cyber risk management with the organization's goals and outcomes

Utilize both analytical and qualitative assessment approaches to identify, assess, and develop appropriate mitigation plans and strategies

Apply experience to effectively manage cyber risk at technical and non-technical levels to help the organization understand where and how to maintain target business risk tolerance

Support IT and information security leadership in making risk informed decisions and shaping the future direction of BCBSA's cybersecurity program

Assess internal and third-party supplier risks, realistically translate them for both technical and non-technical audiences, and clearly articulate recommended actions and organizational impact

Responsible for providing Cyber Risk leadership and subject matter expertise on all assigned projects

Responsible for identifying day-to-day task assignments and providing technology and project management guidance on deliverables

Validates and ensures Cyber Risk requirements are thorough, testable, detailed, concise and traceable

Accountable for project deliverables, estimates, project team-structures, technical artifacts, and engagement of all project stakeholders

Responsible for project planning, budget approvals, estimation and management for all project deliverables, collaborates with Service Delivery managers as appropriate

Proficient in implementing cyber risk processes, leads teams to attain goals, pursue excellence and establish discipline specific best-practices

Responsible for driving all project decisions, strong ability to make timely decisions and establish project governance

Collaborates with other team-members, peers and builds trust, exhibits sense of urgency, biased for action and possesses good follow-up skills

Customer focused with ability to persuade and drive consensus to resolve conflict and facilitate timely decision making

Reviews and approves team progress reports, expenses, invoices and contracts in a thorough and timely manner

Reviews the status reports of team members and addresses issues as appropriate

Complies with and helps to enforce standard policies and procedures

Provides and seeks timely feedback to IT partners, peers and team-members

Provides leadership as a product champion for cyber risk in the Governance, Risk and Compliance technology platform and Cyber Risk direction to business by establishing a vision and risk strategy to meet established project goals and objectives, while focused on continuous improvement

Provides project team(s) business/technical leadership and guidance on day to day tasks

Responsible for driving change for implementing process improvements and ensuring long term compliance

Leads the creation and maintenance of methodologies and processes for the department

Expected to lead multiple, simultaneous projects and time-critical deliverables

Lead and manage a team with the aim of driving effective performance management, fostering professional growth, and creating a positive and inclusive work environment

Maintains a formal risk register that drives security, governance and ensures security findings are aligned with business objectives

Responsible for maintaining positive working relationships with all groups, cross-functional teams, including technical

Identifies opportunities/needs and works with team-leads and other directors to enhance relationships and influence decisions outside of direct functional reporting structure

Provides budget forecasts and estimates for Cyber Risk activities on a continuous basis

Responsible for variance analysis and justifications and following the established BCBSA processes/procedures

Responsible for providing status updates to Senior/Executive management

Responsible for escalating risks/issues with customer issues appropriately and in a timely manner

Ensures design, development, testing and investigative activities lead to appropriate resolution

Effectively and tactfully communicates relevant and potentially difficult/sensitive information to senior management

Responsible for engaging, understanding and effectively communicating needs of business to IT teams/partners

Resolves and/or escalates issues, proposes alternatives, and sets or manages expectations in a timely fashion

Responsible for leading and managing delivery on multiple projects and responsible for all project related resource management, task-prioritization and development

Frequent Plan interactions via System Advisory Group or project communications to ensure business solutions meet Plan needs and implementation/budget concerns are understood

Frequent project participation/collaboration to ensure technical solutions meet business needs

Qualification

Cyber Risk ManagementRegulatory ComplianceProject ManagementChange ManagementLeadership SkillsAnalytical SkillsCommunication SkillsTeam Management

Required

Bachelor's Degree IT, information Security, Risk or IT Management, Computer Science, or a related field; or equivalent work experience

10+ Years career experience in IT or a closely related field

Knowledge of national and international regulatory and compliance frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, HIPAA/HITECH

Extensive knowledge in the use of Project Management methodologies and tools, and change management techniques

Demonstrated leadership, mentoring, and project management skills

Understanding of current application cyber risk development methodologies and risks, researching emerging technologies and possible application to the business

Benefits

Annual bonus incentive

Paid time off

11 holidays

Medical/dental/vision insurance

Generous 401(k) matching

Lifestyle spending account

Many other benefits

Company

Blue Cross Blue Shield Association

Glassdoor3.5

Blue Cross Blue Shield Association is a national federation of 36 independent operated Blue Cross and Blue Shield companies.

Founded in 1929

Chicago, Illinois, USA

1001-5000 employees

http://www.bcbs.com/

H1B Sponsorship

Blue Cross Blue Shield Association has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (1)

2020 (2)