Bethesda, MD, United States
Sep 22, 2021
IT Exception Management Professional 2
Are you a fit?
Do you have a passion for being able to impact and influence the direction of people's thinking through the delivery of technology and analytical findings? Do you enjoy taking on complex technical problems, data analytics, and navigating ambiguity to find a solution? If these this sounds like something interesting, the IT Risk Governance team may have an opportunity for you.
The Information Technology Risk Governance (ITRG) team has a great opportunity for an IT Governance Risk Advisor. The ITRG team is responsible for developing and implementing an IT Risk Governance framework within the Humana technology governance, infrastructure, and control environment.
The IT Compliance Professional 2 works with all parts of IT to ensure that the appropriate controls exist, operate effectively and that information systems procedures are in compliance with industry and corporate standards. Understands department, segment, and organizational strategy and operating objectives, including their linkages to related areas. Makes decisions regarding own work methods, occasionally in ambiguous situations, and requires minimal direction and receives guidance where needed. Follows established guidelines/procedures.
You will assist the Lead of the Information Technology Exception Management (ITEM) workflow. You responsibilities will be to evaluate the various Humana systems that maintain exceptions, issues, opportunities, and support the Lead in summarizing this information for the Director and Vice President of IT Risk Governance and Compliance. You will also support the Lead of ITEM in tracking down issues and exceptions to help Humana's IT teams successfully resolve their gaps. This is a technically complicated role that has high visibility, the opportunity to work cross functionally across IT, and has direct impact to improving Humana's risk profile.
Key responsibilities include:
Inventory and track Issues and Opportunities (IOPs)
Inventory and track exceptions identified in ServiceNow
Pull data from ESP and ServiceNow to support ITEM Lead
Liaise with Internal Audit to track and manage Risk and Compliance IOPs
Liaise with Business ORMs and non-IT Technology teams (i.e. HGB) to track and manage Business Technology IOPs
Liaise with Compliance to track and manage IT Compliance IOPs
Support the ITEM Lead in building monthly reports and gathering supporting data
Build and gather exception data and summarize
Meets established expectations and takes responsibility for achieving results; encourages others to do the same.
Consistently models and inspires high levels of integrity, lives up to commitments, and takes responsibility for the impact of one's actions.
: Understands oneself, effectively manages emotions, listens and communicates with respect, and builds trusting relationships.
Leads by example to cultivate a climate of motivation, positive energy and meaning in work. Assesses, selects, recognizes, develops, and empowers diverse talent
Understands the relationship among business processes, technology, risk, compliance, and governance.
A combined 1-3 years' experience in compliance, audit, or risk management activities.
Ability to influence others
Likes to focus on the big picture and thrives in a fast paced, multi-project work environment
Excellent communication skills, both oral and written
General understanding of diverse technologies
Ability to demonstrate advanced emotional, situational, and social intelligence
We will require full COVID vaccination (**** for this job as we are a healthcare company committed to putting health and safety first for our members, patients, associates and the communities we serve.
If progressed to offer, you will be required to provide proof of full vaccination or documentation for a medical or religious exemption consideration where allowed by law. Requests for these exemptions should be submitted at least 2 week prior to your scheduled first day of work.
Certifications such as CISA, CISSP, CIA, CRISC, CGEIT, PMP
Understanding of compliance requirements such as Payment Card Industry (PCI), Sarbanes-Oxley, SSAE-18 SOC1 & SOC2, HIPAA, ISO27001, COBIT, VALIT, RISKIT, ITIL, COBIT, SANS
Understanding of general requirements over a controlled environmental and physical security environment
Working knowledge of Cloud
Scheduled Weekly Hours