POSITION TITLE: Compliance Coordinator

The Healthcare Insurance Reciprocal of Canada (HIROC) is a trusted healthcare safety advisor, committed to offering a full spectrum of insurance, risk and claims management products and support.

HIROC knows healthcare as it’s the largest not-for-profit healthcare liability insurer in the country, with over 700+ healthcare organizations part of the Reciprocal. Combined with sage counsel and risk management solutions, HIROC works with its partners to increase safety.

As a Reciprocal, HIROC is governed by its Subscribers and remains an innovative, agile and proactive partner. Since its inception in 1987, the not-for-profit has returned over $200 million to the healthcare system. HIROC’s thirty-plus years of data is combined with its extensive experience to advise and share learnings, all with the goal of scaling knowledge and increasing safety across Canada’s healthcare system.

One common thread running through HIROC’s culture is the feeling of being part of something unique:

partnering to create the safest healthcare system – HIROC’s vision.

Each employee has the opportunity to find their calling and help build a stronger organization designed to meet the needs of its Subscribers. As a Top 100 GTA Employer six years running, HIROC employees are empowered to find solutions and create amazing experiences in service to its Subscribers.

Join us and be part of the team working to make a difference.

KEY RESPONSIBILITIES:

· Coordinate and gather required evidence to assess compliance for Data Protection, Information Security and Privacy

· Assist HIROC’s Lead, Privacy and Compliance Officer with SOC 2 compliance review activities and third-party audit activities

· Assist HIROC’s Lead, Privacy and Compliance Officer and Lead, Infrastructure with assessment with gathering evidence and assessing NIST Cybersecurity Framework compliance

· Track and monitor statuses on privacy and security recommendations for new systems, cloud solutions and projects affecting sensitive data

· Coordinate remediation activities of identified vulnerabilities and exploits

· Assist with remediation efforts as required (e.g. patch update, decommissioning of servers, etc.)

· Help develop knowledge base for IT (e.g. repository of procedures, changes to technology, etc. associated with change management)

· Maintaining and updating existing documentations, including policies, checklists, asset inventories, etc.

· Monitor various communication avenues for security vulnerabilities and security patches. Assess security vulnerabilities and security patches across the operating environment.

· Review penetration test and vulnerabilities scan results and coordinate mitigating activities with Information Technology and Information Systems team.

· Working with our MSSP to support the technical investigations of alerts that are generated via the SIEM and SOC

· Assist with the development and delivery of information security awareness training programs

· Assist the with the development of regular and ad-hoc security assessments and analytical reports for dissemination to various audiences, including Executive Team, Operations, and Employees

· Work with HIROC’s Lead, Privacy and Compliance Officer with rolling out a Compliance Management System

· Other duties as assigned

KNOWLEDGE, SKILLS & ABILITIES

· Demonstrate strong organizational, research, analytical and problem-solving skills to evaluate situations, make recommendations and take effective action

· Capable of articulating complex technical concepts or scenarios to both technical and non-technical audiences

· Professional security or intelligence designation is an asset

· Detailed understanding of information security concepts and ability to work with subject matter experts in IT and cybersecurity

· Good knowledge of security management principles, practices, policies, and procedures

· Demonstrates good communication skills and a good team player

· Passionate about corporate security, analysis and problem-solving.

EDUCATION, TRAINING & EXPERIENCE REQUIRED:

· Completed post-secondary education at the Bachelor or College level in Information Technology and 5 years of related work experience or an equivalent combination of education and experience

· Cyber security related experience and understanding of NIST framework and SOC2 audits would be considered an asset

As a condition of employment, all external hires will be required to submit proof of COVID-19 vaccination or documentation unless a valid medical exemption or a valid exemption based on enumerated grounds under the Ontario Human Rights Code exists. All internal candidates must be in compliance with HIROC's COVID-19 Vaccination Policy.

In order to be considered for this position, please include a current résumé or detailed qualifications summary with your application. Only those selected for an interview will be contacted.

HIROC is committed to providing a barrier-free environment for all stakeholders, including our subscribers, employees, job applicants, suppliers, the public and any visitors who may enter our premises, access our information, or use our services. As an organization, we respect and uphold the requirements set forth under the Accessibility for Ontarians with Disabilities Act (AODA) and its associated standards and regulations and will ensure that we offer a safe and welcoming environment that is respectful of each person's dignity and independence.

As an organization, HIROC is dedicated to meeting the needs of individuals with disabilities in a timely manner. We understand that providing a barrier-free environment is a shared effort, and as an organization, we are committed to working with the necessary parties to make accessibility a reality for all.

Healthcare Insurance Reciprocal of Canada (HIROC)

New Jobs

Compliance Coordinator