What are the responsibilities and job description for the Information Security Risk & Governance Specialist, Principal (Third party Risk) position at Blue Shield of CA?
Your Role
This role supports Stellarus within the Ascendiun Family of Companies.The Risk Management & Controls Assurance team delivers actionable insights by quantifying IT and business risk to increase resilience while driving a security culture. We are seeking an Information Security Risk & Governance Specialist who will report to the Senior Manager. The successful candidate will be a seasoned and strategic professional who will lead the development, implementation, and oversight of our Third-Party Risk Management (TPRM) program. This senior-level individual contributor will be responsible for identifying, assessing, and mitigating risks associated with third-party relationships across the enterprise, ensuring compliance with regulatory requirements and alignment with organizational risk tolerance.
Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.
Your Knowledge and Experience
Requires a bachelor's degree or equivalent experience
Requires at least 10 years of prior relevant experience
Experience in portfolio management, preferably within an Agile or SAFe environment, JIRA experience a plus
Experience partnering with all levels of management required
Driven, energetic, team player with superior oral and written communication skills
Strong analytical, organizational, and project management skills.
Requires deep understanding of IT control frameworks; Artificial Intelligence experience is a plus
- Desire one or more of the following: CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional)
External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.