What are the responsibilities and job description for the Cybersecurity Governance, Risk, & Compliance Manager position at Erlanger?
Job Summary
This individual will report to the Chief Information Security Officer. The Cybersecurity Governance, Risk, & Compliance (GRC) Manager designs, implements, and maintains Erlanger Health System's cybersecurity policy framework, compliance programs, and governance processes to ensure alignment with NIST CSF 2.0 Govern function and healthcare regulations including HIPAA Security Rule, as well as emerging standards for AI security (e.g., NIST AI RMF), post-quantum cryptography, and cloud security frameworks (e.g., CSA CCM).
This role addresses risks from evolving technologies such as AI-integrated systems, quantum computing, and cloud-based infrastructures while prioritizing regulatory compliance and organizational resilience.
Expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF, plus familiarity with NIST AI Risk Management Framework (RMF), post-quantum cryptography standards (e.g., NIST PQC), and cloud security frameworks (e.g., AWS Well-Architected Security, Azure Security Center, or CSA STAR). Demonstrated ability to communicate complex compliance and risk concepts, including those from AI, quantum, and cloud domains, to both technical and non-technical audiences. Ability to work in dynamic environments, including occasional after-hours support for compliance-related incidents or audits.
Days and hours worked may be variable. (Hybrid/On-site as required)
Minimum Qualifications or Competencies: Basic competencies include, but are not limited to education, experience, or certification requirements.
Education
Experience:
Required
This individual will report to the Chief Information Security Officer. The Cybersecurity Governance, Risk, & Compliance (GRC) Manager designs, implements, and maintains Erlanger Health System's cybersecurity policy framework, compliance programs, and governance processes to ensure alignment with NIST CSF 2.0 Govern function and healthcare regulations including HIPAA Security Rule, as well as emerging standards for AI security (e.g., NIST AI RMF), post-quantum cryptography, and cloud security frameworks (e.g., CSA CCM).
This role addresses risks from evolving technologies such as AI-integrated systems, quantum computing, and cloud-based infrastructures while prioritizing regulatory compliance and organizational resilience.
Expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF, plus familiarity with NIST AI Risk Management Framework (RMF), post-quantum cryptography standards (e.g., NIST PQC), and cloud security frameworks (e.g., AWS Well-Architected Security, Azure Security Center, or CSA STAR). Demonstrated ability to communicate complex compliance and risk concepts, including those from AI, quantum, and cloud domains, to both technical and non-technical audiences. Ability to work in dynamic environments, including occasional after-hours support for compliance-related incidents or audits.
Days and hours worked may be variable. (Hybrid/On-site as required)
Erlanger Baroness Hospital Chattanooga, TNCybersecurity Governance, Risk, & Compliance Manager
Standard Hours
Regular
This individual will report to the Chief Information Security Officer. The Cybersecurity Governance, Risk, & Compliance (GRC) Manager designs, implements, and maintains Erlanger Health System's cybersecurity policy framework, compliance programs, and governance processes to ensure alignment with NIST CSF 2.0 Govern function and healthcare regulations including HIPAA Security Rule, as well as emerging standards for AI security (e.g., NIST AI RMF), post-quantum cryptography, and cloud security frameworks (e.g., CSA CCM).
This role addresses risks from evolving technologies such as AI-integrated systems, quantum computing, and cloud-based infrastructures while prioritizing regulatory compliance and organizational resilience.
Expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF, plus familiarity with NIST AI Risk Management Framework (RMF), post-quantum cryptography standards (e.g., NIST PQC), and cloud security frameworks (e.g., AWS Well-Architected Security, Azure Security Center, or CSA STAR). Demonstrated ability to communicate complex compliance and risk concepts, including those from AI, quantum, and cloud domains, to both technical and non-technical audiences. Ability to work in dynamic environments, including occasional after-hours support for compliance-related incidents or audits.
Days and hours worked may be variable. (Hybrid/On-site as required)
Minimum Qualifications or Competencies: Basic competencies include, but are not limited to education, experience, or certification requirements.
Education
- Required: Bachelor's degree in information security, Compliance, or a related field (Master's preferred, with coursework or emphasis on AI, quantum computing, or cloud technologies).
Experience:
Required
- 7 years of experience in cybersecurity governance and compliance, preferably in a healthcare system, with exposure to AI-integrated compliance, quantum security concepts, or cloud-based governance.
This individual will report to the Chief Information Security Officer. The Cybersecurity Governance, Risk, & Compliance (GRC) Manager designs, implements, and maintains Erlanger Health System's cybersecurity policy framework, compliance programs, and governance processes to ensure alignment with NIST CSF 2.0 Govern function and healthcare regulations including HIPAA Security Rule, as well as emerging standards for AI security (e.g., NIST AI RMF), post-quantum cryptography, and cloud security frameworks (e.g., CSA CCM).
This role addresses risks from evolving technologies such as AI-integrated systems, quantum computing, and cloud-based infrastructures while prioritizing regulatory compliance and organizational resilience.
Expert knowledge of NIST CSF 2.0, HIPAA Security Rule, and HITRUST CSF, plus familiarity with NIST AI Risk Management Framework (RMF), post-quantum cryptography standards (e.g., NIST PQC), and cloud security frameworks (e.g., AWS Well-Architected Security, Azure Security Center, or CSA STAR). Demonstrated ability to communicate complex compliance and risk concepts, including those from AI, quantum, and cloud domains, to both technical and non-technical audiences. Ability to work in dynamic environments, including occasional after-hours support for compliance-related incidents or audits.
Days and hours worked may be variable. (Hybrid/On-site as required)
Erlanger Baroness Hospital Chattanooga, TNCybersecurity Governance, Risk, & Compliance Manager
Standard Hours
Regular