Cyber Risk Coordinator CGRC | Full Time

DESCRIPTION:
The Cybersecurity Risk Coordinator reports to the Manager of Cybersecurity Risk Services. This position will work in a collaborative effort with Cybersecurity Risk Specialists, IT, and all system leadership (Supervisor and above) to assure incoming requests are addressed and distributed to the proper team members. Additionally, this role works closely with Cybersecurity Risk Specialists to support all employee and non-employee roles, including, but not limited to vendors, contractors, consultants, and partners to support the mission and goals of Henry Ford Health Cybersecurity Risk Management strategy.

PRINCIPLE DUTIES AND RESPONSIBILITIES:
The Cybersecurity Risk Coordinator handles supporting tasks related to performing cyber/third party risk assessments of applications, infrastructure, business, and technology vendors against a defined risk framework. These assessments will be performed either through a formalized risk assessment program or through other risk reporting activities (e.g., policy exception, risk acceptance, controls). Must have the ability to develop work with minimal supervision, maintain and report against a work plan, give appropriate updates and status reports, and serve as a point of contact and liaison with internal and external auditors, assessors, vendors and clients and assist other staff members.

• Responsible for understanding the Cybersecurity Risk Services department and Information Privacy and Security Office services, functional IT services, and the business unit processes/ systems to provide world-class cybersecurity risk services.
• Validating Risk Intake Request Forms for employees and non-employees via technology platform and triaging it to the Cybersecurity Risk Specialists capable of starting their tasks.
• Assist in corporate process creation and revision using MS Office including Visio.
• Supporting, creating processes for intake of forms, streamline/update existing processes, procedures, and checklists.
• Liaison with internal / external stakeholders as needed.
• Contributes to the development and maintenance of supporting technology platforms and Corporate Information Security policies and procedures.
• Manage Group Outlook Mailbox and assign a ticket in the technology platform to Cybersecurity Risk Specialists to start their tasks.
• Supports managing checklists, and continuously improves the work instructions with the team.
• Initializes cyber/third party risk assessments reports for the Cybersecurity Risk Specialists to review for closure.
• Support IPSO and IT teams via integrated workflow.
• Supports client due diligence requests including the completion of questionnaires.
• Supports project and strategy advisory services and supports as needed.
• Capable of following documented work instructions with limited guidance.
• Other duties may be assigned.