Job description
This role will be responsible for managing security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives.
The ideal candidate will act as the single point of contact (SPOC) for security governance matters across Conifer, ensuring alignment with enterprise security requirements, client obligations, regulatory standards, and business objectives. This leader will work closely with Conifer executives, operational leaders, compliance teams, technology teams, customers, vendors, auditors, and Tenet Enterprise Security to drive a unified security and risk management program.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Include the following. Others may be assigned.
Security Governance & Compliance
Lead Conifer’s security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices.
Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support.
Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments.
Track compliance initiatives and monitor remediation activities through completion.
Facilitate governance forums and provide regular updates to executive leadership.
Customer Security & Client Engagement
Serve as the primary security representative for client security inquiries, assessments, and due diligence activities.
Lead customer security reviews, questionnaires, RFP/RFI responses, and security presentations.
Build trusted relationships with client security, compliance, legal, and technology stakeholders.
Partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery.
Vendor Risk Management
Manage Conifer’s third-party security risk management processes.
Conduct security reviews and risk assessments for vendors, partners, and service providers.
Coordinate remediation plans with vendors and internal stakeholders.
Ensure compliance with vendor security requirements, contractual obligations, and client expectations.
Maintain vendor security risk documentation and reporting.
Strategic Partnership with Tenet
Serve as Conifer’s primary liaison to Tenet Enterprise Security, Risk, and Compliance organizations.
Coordinate the adoption and implementation of enterprise security initiatives across Conifer.
Ensure alignment between Conifer-specific requirements and Tenet cybersecurity standards.
Represent Conifer in enterprise security governance, risk management, and strategic planning activities.
Risk Management & Security Programs
Identify, assess, and monitor information security, operational, and third-party risks.
Support enterprise risk management activities, risk reporting, and mitigation planning.
Track security findings and corrective actions through closure.
Assist in the development and maintenance of security policies, standards, and procedures.
Executive Reporting & Stakeholder Management
Develop executive-level reporting, dashboards, and risk metrics.
Present security program status, compliance updates, and risk assessments to senior leadership.
Drive cross-functional collaboration among Security, Compliance, Legal, Operations, Technology, and Client Services teams.
REQUIRED QUALIFICATIONS
Bachelor’s degree in Information Security, Computer Science, Information Technology, Business Administration, or related field/experience.
7+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance.
3+ years of leadership or program management experience.
Strong knowledge of:
SOX IT Controls (ITGC)
Security Governance & Compliance
Vendor Risk Management
Client Security Reviews and Due Diligence
Risk Assessment Methodologies
SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements
Experience working directly with customers, auditors, and executive stakeholders.
Exceptional communication and presentation skills.
Preferred Qualifications
Industry certifications such as:
CISSP
CISM
CRISC
CISA
Security+
Experience in healthcare, revenue cycle management, or regulated industries.
Experience supporting large-scale enterprise security programs and governance frameworks.
Familiarity with Tenet or complex multi-entity healthcare environments.
As a part of the Tenet and Catholic Health Initiatives family, Conifer Health brings 30 years of healthcare industry expertise to clients in more than 135 local regions nationwide. We help our clients strengthen their financial and clinical performance, serve their communities, and succeed at the business of healthcare. Conifer Health helps organizations transition from volume to value-based care, enhance the consumer and patient healthcare experience and improve quality, cost, and access to healthcare. Are you ready to be part of our solutions? Welcome to the company that gives you the resources and incentives to redefine healthcare services, with a competitive benefits package and leadership to take your career to the next step!
Compensation and Benefit Information
Compensation
Pay: $120,016 - $191,568 annually. Compensation depends on location, qualifications, and experience.
Position may be eligible for an Annual Incentive Plan bonus of 10%-40% depending on role level.
Management level positions may be eligible for sign-on and relocation bonuses.
Benefits
Conifer offers the following benefits, subject to employment status:
Medical, dental, vision, disability, AD&D and life insurance
Manager Time Off – 20 days per year
Discretionary 401k match
10 paid holidays per year
Health savings accounts, healthcare & dependent flexible spending accounts
Employee Assistance program, Employee discount program
Voluntary benefits include pet insurance, legal insurance, accident and critical illness insurance, long term care, elder & childcare, auto & home insurance
For Colorado employees, paid leave in accordance with Colorado’s Healthy Families and Workplaces Act is available.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.