Manager - IS Information Security GRC & Security Architecture

Responsibilities Headquartered in King of Prussia, PA, Universal Health Services, Inc. (NYSE: UHS) is one of the nation’s largest and most respected providers of hospital and healthcare services. Since our founding in 1979, UHS has grown steadily into a premier Fortune 500® corporation perennially recognized by multiple esteemed national rating entities. Through its subsidiaries, UHS operates inpatient acute care facilities, inpatient behavioral health facilities, outpatient and other facilities, nationwide virtual behavioral health services, an insurance offering, a physician network and various related services with physical locations in the U.S., Puerto Rico, Ireland and United Kingdom. www.uhs.com. The Corporate Information Services Department is seeking a dynamic and talented Assistant Manager – BH Clinical Applications The Manager – Information Security GRC and Security Architecture manages the deployment and support of the Governance, Risk, and Compliance (GRC) program and cybersecurity architecture functions that support the security of electronic information, systems, networks, cloud environments, and business processes across all Corporate, BH and Acute Hospitals. Leads and supervises GRC and Security Architecture staff and resources to execute program activities and initiatives in alignment with the organization’s Information Security Management Systems, established policies, enterprise architecture standards, and regulatory requirements. Key responsibilities include: Provides management of the implementation and ongoing support of corporate owned information security applications, cybersecurity architecture standards, and security controls. Participates in leading security compliance (e.g., PCI compliance) initiatives to clearly identify control objectives and work with other teams to exceed audit objectives. Exercises responsibility for supervision, performance evaluations and direction of team. Coordinates work assignments given in order to meet deadlines and ensure continued progress toward assignment completion. Works with CISO to identify current and emerging threats to our systems and environment to prevent incidents where possible and actively manage them as necessary. Works closely with CISO and other senior level personnel to further enhance and develop their leadership skills. Continually evaluates the security posture and cybersecurity architecture of cloud, network, infrastructure, endpoint, application, and data environments against internal policy, regulatory requirements, enterprise standards, and industry best practices. Qualifications Position Requirements: Bachelor’s degree required. 5-8 years of progressive information security experience that includes 1-3 years management experience and / or 3 years of direct Information Security experience in a multi-facility Acute and BH Hospital environment. Healthcare industry experience preferred. Working knowledge of cybersecurity architecture principles, secure design patterns, cloud security architecture, identity and access management, network segmentation, endpoint protection, data protection, vulnerability management, and security control integration across enterprise technology environments. Strong technical analytical skills, project management certification and/or experience, process improvement related to workflow processes, training, development of educational material. Proven knowledge and experience developing and implementing a cybersecurity risk management framework based on regulations such as HIPAA or SOX and best practices as defined in NIST, ISO, PCI, and other common cybersecurity frameworks. Ability to review proposed technology solutions, assess architectural risk, define security requirements, and partner with infrastructure, application, cloud, and business teams to embed security controls into solution designs. Able to communicate clearly and respectfully with Executives, and all other personnel. Strong process and technology analysis skills. Ability to prioritize and balance multiple projects, priorities, or objectives. Learns quickly, takes constructive feedback on performance, stays focused on the job with attention to detail and produces desired outcomes. Travel Requirements: Up to 10% US or International travel This opportunity provides the following: Challenging and rewarding work environment Growth and development opportunities within UHS and its subsidiaries Competitive Compensation Excellent Medical, Dental, Vision and Prescription Drug Plan 401k plan with company match Generous Paid Time Off *UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly-owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc. UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means. EEO Statement All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws. Avoid and Report Recruitment Scams We are aware of a scam whereby imposters are posing as Recruiters from UHS, and our subsidiary hospitals and facilities. Beware of anyone requesting financial or personal information. At UHS and all our subsidiaries, our Human Resources departments and recruiters are here to help prospective candidates by matching skill set and experience with the best possible career path at UHS and our subsidiaries. During the recruitment process, no recruiter or employee will request financial or personal information (e.g., Social Security Number, credit card or bank information, etc.) from you via email. Our recruiters will not email you from a public webmail client like Hotmail, Gmail, Yahoo Mail, etc. If you suspect a fraudulent job posting or job-related email mentioning UHS or its subsidiaries, we encourage you to report such concerns to appropriate law enforcement. We encourage you to refer to legitimate UHS and UHS subsidiary career websites to verify job opportunities and not rely on unsolicited calls from recruiters.