| ALL INTERESTED APPLICANTS MUST DIRECTLY APPLY ON THE NORTH CAROLINA STATE WEBSITE TO BE CONSIDERED FOR THIS POSITION: Job Opportunities | Careers with the State of NC (governmentjobs.com) Description of Work The Chief Information Risk Officer (CIRO) reports to the Chief of Technology Services (CTS) and will be responsible for leading the Privacy and Security Office (PSO). The CIRO will directly manage PSO’s Information Risk Management area which includes the Privacy and Security Governance, Risk, and Compliance (GRC) of NC Department of Health and Human Services (DHHS). The CIRO will also provide oversight of PSO’s Information Security Management area led by the Chief Information Security Officer (CISO). This position oversees the development of various security framework and policies for DHHS and enforces compliance to Federal, State, DHHS and industry security policy and strategies. Provides GRC methodologies and frameworks for DHHS’ enterprise technologies. Oversees and administers security and risk determination programs and procedures for DHHS by providing direction to all entities.
These duties include: - Develops risk assessment processes based on NIST 800-53, HIPAA and IRS Publication 1075.
- Oversees the development and review of DHHS policies, standards, guidelines, and procedures to ensure compliance with federal and state requirements.
- Participate in the planning and implementation of privacy, security, and continuity of operations strategies.
- Manages the review of third-party assessments including SOC 2 Type 2.
- Manges the evaluation of contracts, agreements, and projects for security requirements.
- Participate in system reviews/audits in accordance with Federal, State and Departmental (DHHS) regulations and policies.
- Oversees the Privacy Threshold Analyses (PTA) and Vendor Readiness Assessment Reports (VRAR) process.
- Responsible for the development of information security frameworks such as Cloud Security, Incident Response, and Insider Threat Programs.
- Defines Privacy and Security governance process and establishes steering committee to facilitate business and IT leadership participation in key decisions and to improve stakeholder communication.
- Identifies various improvement opportunities within Privacy and Security organization (PSO) and oversees execution.
- Manage the CISO and provide oversight of the Information Security Management area.
About NC Department of Health and Human Services:
The North Carolina Department of Health and Human Services (DHHS) serves the needs of the most vulnerable of North Carolinians and to accomplish this, we hire only the most dedicated and caring individuals. Finding qualified clinical professionals to treat and care for our clients is a continual challenge as demand for services grows and the availability of providers struggles to keep pace. We are seeking a motivated individual who is up for this challenge and is dedicated to our mission of providing North Carolinians with the very best in clinical care.
About the DHHS Information Technology Division:
The DHHS Information Technology (IT) Division provides enterprise information technology leadership and solutions to the department and their partners so that they can leverage technology resulting in the delivery of consistent, cost effective, reliable, accessible, and secure services. The DHHS IT Division works with business units to help ensure the availability and integrity, and promotion of confidentiality of automated information systems to meet their business goals. DHHS IT Division’s primary information technology services are Application Management, Project Management, Privacy and Security, Financial Management, Health Information Technology, Infrastructure and Service Management. |
