IT Security Specialist I

IT Security Specialist IOur client, a health insurance company, is looking for an IT Security Specialist I for their Detroit, MI/Hybrid location. Responsibilities include evaluating the design and operation effectiveness of business/IT operations against the HITRUST CSF and identifying areas of improvement. Interview SMEs and document meeting minutes from the discussion. Examine evidence/documentation, perform detailed testing and document detailed assessment notes/results. Learn the company functions/processes by conducting process walk-throughs. Analyze root cause of issues, provide recommendations for process improvements and risk mitigation based on assessment findings. Collaborate with cross-functional teams to mitigate risks and ensure compliance with HITRUST CSF. Deliver effective and concise documentation that meets HITRUST quality standards. Prepare and provide reporting such as dashboards and metrics, on various areas of performance, issue analysis and assessment statuses. Utilize GRC tools to effectively manage assessment remediation plans and documentation. Serve as a HITRUST subject matter expert. Participate and provide support during audits, assessments, or other required third-party reviews. Support initiatives/projects. Build relationships internally to foster a culture of teamwork and collaboration.Requirements include at least 4-5 years of work experience in IT compliance, IT assessments and/or IT audit experience as well as knowledge and understanding of governance, risk, compliance. Knowledge of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF, ISO/IEC 27001, COBIT). Self-starter with effective written and verbal communication skills along with strong critical thinking skill. Required Skills/Experience include effective written and verbal communication skills and the ability to tailor communication style to the audience at hand. Experience in coordination and execution of the audit lifecycle, including evidence collection, review, observation tracking, management response collection and auditor relations and communication. Strong demonstration of problem-solving and decision-making ability. Experience working on testing of IT controls across systems, databases, applications and operating systems. Strong ability to frame and deliver messages based on experience and level of the listener. Strong critical thinking skills to actively pursue opportunities to develop and implement solutions to solve work problems. Must be able to solve problems, handle conflict, and make effective decisions under pressure with a highly professional demeanor. Strong organizational skills. Strong ability to adjust to changing priorities while multitasking effectively. Self-directed and works with minimal guidance. Proactively seeks guidance when needed.Preferred Skills/Experience include knowledge/experience with Information Technology GCC as well as knowledge and understanding of governance, risk & compliance. Experience performing audits/assessments. Knowledge and usage of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF).Education/Certifications include an undergraduate university degree (4-year) preferred but not required. Masters (e.g., MBA, MSIS, MIS, etc.) degree preferred but not required. Five (5) years of combined IT experience to include two (2) years IT security work. Experience in Information Security, IT general controls, IT compliance, IT assessments and/or IT audit experience. Certified Information Systems Security Professional (CISSP), CISA, CPA/CA, CISM or other equivalent professional certification preferred but not required.Why Should You Apply? Health benefits, referral program, excellent growth and advancement opportunities.