Senior Cybersecurity Compliance Lead Consultant

This role will:

• Lead the creation and deployment of defined and structured processes to support evolving and maintaining the cyber risk management program. Work across the BCBSA organization to align cyber risk management with the organization's goals and outcomes.

-Utilize both analytical and qualitative assessment approaches to identify, assess, and develop appropriate mitigation plans and strategies.
-Apply experience to effectively manage cyber risk at technical and non-technical levels to help the organization understand where and how to maintain target business risk tolerance.
-Support IT and information security leadership in making risk informed decisions and shaping the future direction of BCBSA's cybersecurity program.
-Assess internal and third-party supplier risks, realistically translate them for both technical and non-technical audiences, and clearly articulate recommended actions and organizational impact.

Specifically, this role will lead BCBSA’s Federal Risk and Authorization Management Program (FedRAMP) compliance strategy by building and scaling an AI-enabled compliance operating model that embeds regulatory controls, continuous monitoring, audit readiness, and risk management into enterprise technology and business operations.

• Responsible for providing Cyber Risk leadership and subject matter expertise on all assigned projects. Responsible for identifying day-to-day task assignments and providing technology and project management guidance on deliverables. Validates and ensures Cyber Risk requirements are thorough, testable, detailed, concise and traceable. Accountable for project deliverables, estimates, project team-structures, technical artifacts, and engagement of all project stakeholders.
• Responsible for project planning, budget approvals, estimation and management for all project deliverables, collaborates with Service Delivery managers as appropriate. Proficient in implementing cyber risk processes, leads teams to attain goals, pursue excellence and establish discipline specific best-practices. Responsible for driving all project decisions, strong ability to make timely decisions and establish project governance. Collaborates with other team-members, peers and builds trust, exhibits sense of urgency, biased for action and possesses good follow-up skills. Customer focused with ability to persuade and drive consensus to resolve conflict and facilitate timely decision making.
• Reviews and approves team progress reports, expenses, invoices and contracts in a thorough and timely manner. Reviews the status reports of team members and addresses issues as appropriate. Complies with and helps to enforce standard policies and procedures. Provides and seeks timely feedback to IT partners, peers and team-members.
• Provides leadership as a product champion for cyber risk in the Governance, Risk and Compliance technology platform and Cyber Risk direction to business by establishing a vision and risk strategy to meet established project goals and objectives, while focused on continuous improvement. Provides project team(s) business/technical leadership and guidance on day-to-day tasks. Responsible for driving change for implementing process improvements and ensuring long term compliance. Leads the creation and maintenance of methodologies and processes for the department. Expected to lead multiple, simultaneous projects and time-critical deliverables.