Responsibilities

The Security Governance Program Manager will be responsible for day-to-day implementation and management of a HITRUST program, coordinating security risk management and vendor due diligence for Imagine Pediatrics. They will serve as a key subject matter expert (SME) for governance, risk, and compliance, support HITRUST r2 certification, maintain security policies, standards, and procedures, lead and enhance the third-party/vendor risk management program, administer the security GRC toolset, coordinate and drive internal security risk assessments and auditing activities, collaborate with business and clinical teams to ensure effective ePHI management, and respond to third-party security and privacy diligence requests. Additionally, they will work with external auditors and partners on security certifications and attestations.