Information Security Risk and Governance Specialist, Principal

Your Role

The Trust Assurance Services team drive BSC information security adherence to regulatory standards, as well as policies, standards, and controls (mainly access controls) with the goal of safeguarding company assets and maintaining confidentiality, integrity, and availability of information. The Access Management, Principal will report to the Senior Manager, IT Controls in Information Security, Risk and Operations division. In this role you will execute a robust Access Management program focused on security and be part of a team of professionals to ensure Blue Shield access and security controls are operating effectively.

Responsibilities

Your Work

In this role, you will:

• Provide subject matter expertise, thought leadership, guidance, best practice and support across access and identity management, security, and the governance risk functions

• Drive access and identity management improvements by partnering with the business and technical stakeholders

• Be responsible for entire product delivery as technical controls industry subject matter expert

• Responsible for documenting and disseminating technical control framework, standards, templates, and tools

• Develops program status, metrics, and other reporting needs for various management levels

• Operate identity and access management procedures and processes as required

• Document, socialize, and educate access management requirements across the enterprise

Qualifications

Your Knowledge and Experience

• Requires a bachelor's degree or equivalent experience

• Requires at least 10 years of prior relevant experience

• Required Project Management Professional Certification (PMP) or equivalent

• Requires hands-on experience with access and identity management tools and frameworks

• Requires great written and verbal communication skills and ability to present to C-Suite

• Requires knowledge SailPoint or other identity and access management tool and ServiceNow or other CMDB tool

• Desired experience in resolving incidents involving access issues

#LI-CP4

About Blue Shield of California

As of January 2025, Blue Shield of California became a subsidiary of Ascendiun. Ascendiun is a nonprofit corporate entity that is the parent to a family of organizations including Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan; Altais, a clinical services company; and Stellarus, a company designed to scale healthcare solutions. Together, these organizations are referred to as the Ascendiun Family of Companies.

At Blue Shield of California, our mission is to create a healthcare system worthy of our family and friends and sustainably affordable. We are transforming health care in a way that genuinely serves our nonprofit mission by lowering costs, improving quality, and enhancing the member and physician experience.

To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve. We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.

Blue Shield is a U.S. News Best Company to work for, a Deloitte U.S. Best Managed Company and a Top 100 Inspiring Workplace. We were recognized by Fair360 as a Top Regional Company, and one of the 50 most community-minded companies in the United States by Points of Light. Here at Blue Shield, we strive to make a positive change across our industry and communities – join us!

Our Values:

• Honest. We hold ourselves to the highest ethical and integrity standards. We build trust by doing what we say we're going to do and by acknowledging and correcting where we fall short.
• Human. We strive to listen and communicate effectively, showing empathy by understanding others' perspectives.
• Courageous. We stand up for what we believe in and are committed to the hard work necessary to achieve our ambitious goals.

Our Workplace Model

We believe in fostering a workplace environment that balances purposeful in-person collaboration with flexibility - providing clear expectations while respecting the diverse needs of our workforce. Our workplace model is designed around intentional in-person interaction, collaboration, connection, creativity and flexibility:

• For most teams, this means coming into the office two days per week.

• Employees living more than 50 miles from an office location, out of state employees, and employees in certain member-facing roles should work with their manager to determine in-office time based on business need.

• For employees with medical conditions that may impact their ability to work in-office, we are committed to engaging in an interactive process and providing reasonable accommodations to ensure their work environment is conducive to their success and well-being.

The Company reserves the right to require more presence in the office based on business needs, and requirements are subject to change with periodic reviews.

Physical Requirements:

Office Environment - roles involving part to full time schedule in Office Environment. Based in our physical offices and work from home office/deskwork - Activity level: Sedentary, frequency most of work day.

Please click here for further physical requirement detail.

Equal Employment Opportunity:

External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.