IT Risk Lead

Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more. Explore more details on the Benefits of Working at HHS webpage.

Brief Job Description:
This IT Risk Lead (Systems Analyst VII) position manages IT Risk for the Administrative Applications Organization. This position reports to the Director of Administrative Applications and is responsible for proactively identifying gaps in and resolution of IT Risks stemming from, but not limited to, cybersecurity, compliance, business continuity, and vendor risk. This role is part of the ongoing maturation of our IT organization towards a DevSecOps model.

This position is tasked with being on the frontline of proactive IT risk identification and management for a portfolio of over 40 applications across a diverse set of technologies such as Java, .Net, Power Platform, SaaS offerings, and Salesforce. In addition, the organization operates on both traditional data centers and cloud.

Day to Day responsibilities include but are not limited to, identification of risks, risk weighting, remediation/resolution planning, and oversight of delivery of remediations and resolutions. 

This position is for U.S. Citizens or residents only.
 

Essential Job Functions:

Attends work on a regular and predictable schedule in accordance with agency leave policy and performs other duties as assigned.
Identifies IT system risks in areas as directed by the Director of Administrative Applications in areas such as, but not limited to, cybersecurity, compliance to state audit, compliance to applicable state statutes, compliance to applicable federal statutes, and vendor dependencies.  Identifies gaps in IT compliance with requirements from, but not limited to, cybersecurity, Federal statute, Federal standards, State statute, State standards, business continuity, and vendor dependencies. (30%)
 

Establishes risk management plans for risks including resourcing, required budget, timelines, and staffing. (30%)

Provides oversight, tracking and reporting to Administrative Applications leadership for deliverables associated with risk management plans. (20%)
Provides required reporting to external stakeholders and HHSC IT Leadership. (10%)

Other job duties as required. (10%) 

Registrations, Licensure Requirements or Certifications:
None

Knowledge, Skills, Abilities:
Knowledge of IT and State of Texas compliance frameworks.
Knowledge of industry standard IT risk management principles.
Knowledge of industry best practices for Cybersecurity technologies such as Java, .Net, Power Platform, Salesforce, Azure, AWS, and OCI.
Knowledge of Agile / Scrum.
Knowledge of Jira.
Skill in verbal, written, and presentation communication.
Skill in applying IT risk frameworks.
Skill in reviewing statute to assess compliance of IT systems.
Skill in IT industry standard project frameworks such as PMP.
Skill in implementing continuous controls and compliance monitoring programs.
Skill in proactively identifying and quantifying gaps in compliance.
Ability to understand detailed issues around business continuity, cybersecurity, statutory, vendor, and overall risk in IT.
Ability to analyze and synthesize technical data and convey it to non-technical audiences.
Ability to drive solutions and solve issues, addressing IT risk.
Ability to establish and maintain effective working relationships with all levels of staff.
Ability to prepare concise reports.
Ability to exercise independent judgment and show initiative.
Ability to research, develop and evaluate policies, processes and procedures, and to implement them.
Ability to analyze customer requests.
Ability to write and revise standards and procedures.
Ability to handle multiple projects.
Ability to supervise the work of others.   

Initial Screening Criteria:

Graduation from a four-year college or university with major coursework in business, communications, computer science, computer information systems, management information systems, or a related field. One year of appropriate experience may be substituted for the required education on a year-for-year basis. 

Required minimum of 7 (seven) years of experience in an Enterprise IT Environment.

Required minimum of 7 (seven) years managing IT Risk.

Required minimum of 5 (five) years managing IT Programs.

Required minimum of 5 (five) years with IT Security - (Cybersecurity, for example).

Required minimum of 5 (five) years with IT Service Management.
Experience with Agile methodologies – (Scrum, for example). 

Additional Information:

Any employment offer is contingent upon available budgeted funds. The offered salary will be determined in accordance with budgetary limits and the requirements of HHSC Human Resources Manual.

Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.

Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.

Active Duty, Military, Reservists, Guardsmen, and Veterans:

Military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position may include, but not limited to those listed in this posting. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information please see the Texas State Auditor’s Job Descriptions, Military Crosswalk and Military Crosswalk Guide at Texas State Auditor's Office - Job Descriptions.

ADA Accommodations:

In compliance with the Americans with Disabilities Act (ADA), HHSC and DSHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the on-line application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.

Pre-Employment Checks and Work Eligibility:

Depending on the program area and position requirements, applicants selected for hire may be required to pass background and other due diligence checks.

HHSC uses E-Verify. You must bring your I-9 documentation with you on your first day of work. Download the I-9 Form