A Kforce client in Orlando, FL is seeking aCyber Security Governance Consultant who would be responsible for overseeing and ensuring the alignment of an organization's cybersecurity strategies with its overall business goals and risk management practices. The Cyber Security Governance Consultant focuses on the development, implementation, and monitoring of governance frameworks that ensure the security of information systems and compliance with relevant laws and standards.
Responsibilities:
Establishing cybersecurity policies, guidelines, and standards that outline best practices for data protection, incident response, and system access control; Ensure that employees and systems adhere to security protocols
Identifying potential cybersecurity risks and ensuring that appropriate measures are in place to manage these risks; Risk assessments, establishing risk thresholds, and prioritizing risk mitigation strategies
Ensuring the organization adheres to cybersecurity regulations, legal requirements, and industry standards like GDPR, HIPAA, or NIST; Ensures that all security practices meet audit and regulatory requirements
Designing and maintaining a governance framework that aligns with the organization's strategic goals and business priorities; Setting up clear roles, responsibilities, and decision-making authority for cybersecurity management
Ensuring there are established protocols for handling cybersecurity incidents, from detection to recovery; Ensure that incident response plans are tested and updated regularly
Collaborating with executives, legal teams, and IT departments to ensure that cybersecurity practices are integrated across the organization; Present cybersecurity risks and solutions to leadership, explaining how these risks could impact the business
Developing and leading programs that train employees and management on cybersecurity risks and responsibilities, fostering a culture of security awareness
REQUIREMENTS:
HIPPA/OCR compliance experience required
Understand HIPPA/Privacy rules
Familiar with Florida/OCR Healthcare regulations
Experience offloading work from VPs on team working with multiple teams
Experience with access management, incident response, vulnerability tickets
Experience working with multiple teams, not just one dedicated resource
Experience with white glove service with end users (reliable with follow ups)
Healthcare Cyber Security experience with HIPPA and OCR compliance (even at a low level)
Resourceful
Self-starter
Dependable
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless
and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking "Apply Today" you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
