GRC System Administrator

Job Description

Job: IT/Information Systems
Primary Location: United States-California-Sunnyvale-US-CA-Sunnyvale
Schedule: Full-time
Requisition ID: 202087
Description
Joining Intuitive Surgical means joining a team dedicated to using technology to benefit patients by improving surgical efficacy and decreasing surgical invasiveness, with patient safety as our highest priority. Primary Function of Position:

The Data Privacy team is responsible for secure-by-design and privacy-by-design aspects of data related services including; software products, digital products, infrastructure and cloud services that collect, analyze, and process; system, medical device machine, and customer data from thousands of systems deployed world-wide.

The ideal candidate for the position of GRC System Administrator will have proven experience working in data privacy & compliance, mapping HIPAA and other compliance requirements to actionable controls and executing the actions through application of technology and security practices.

Roles and Responsibilities:

• Responsible for operating, administering, and serving as a subject matter expert on the GRC Platform
• Provide full engineering life cycle support for GRC platform, including data attribute creation and platform extension/configuration growth
• Develop process flow diagrams, dynamic reports, and dashboards to provide risk summary
• Maintain SaaS instances (Dev/Test and Production) of GRC application
• Provide administrative support to module owners
• Serve as liaison between vendor and staff
• Provide subject matter expertise on GRC application
• Create workflow definition and automation for achievement of defined GRC goals
• Monitor and escalate GRC compliance issues against workflow, task, and risk indicators
• Automate internal review process and periodic assessments
• Establish continuous monitoring for effectively tracking and managing security and privacy controls
• Participate in setup and operation of GRC tool for automation and management of continuous controls testing, risk management, risk assessments, policies and standards management, audit management, executive reporting, act as system of record and unified controls framework for controls mapping across different compliance frameworks
• Helps others apply technology appropriately in product and system design. Trains and communicates to others on use of privacy and risk management software
• Identify and execute upon opportunities improve our ability to measure and report on risk management
• Facilitate and assure identification of key data entities and validation
• Work with members of the privacy team to ensure that data managed by the platform is current and accurate

Qualifications

Skill/Job Requirements:

• Bachelor's degree in Computer Science, Engineering, or related discipline, or commensurate experience
• Minimum 5+ years GRC experience (OneTrust preferred)
• 5+ years of system administration
• 3+ of privacy framework experience (HIPAA, GDPR, etc.)
• Current CISA, CISSP, CIPP, CIPM, CIPT or other related certifications preferred
• Ability to develop relationships and work effectively with customers at all levels and across functions
• Experience responding to the business and/or regulatory environment by proactively recommending changes to controls, reporting, and monitoring
• Familiarity with security and privacy standards such as SOC, ISO 27001, ISO 27018, HIPAA, HITRUST, GDPR, CCPA, etc.
• Working knowledge of data protection

We are an AA/EEO/Veterans/Disabled employer.We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.