> Markdown version of [/jobs/ext/183255-information-security-risk-and-governance-specialist-consultant](https://www.wearedevelopers.com/jobs/ext/183255-information-security-risk-and-governance-specialist-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Risk and Governance Specialist, Consultant - **Company:** Blue Shield of California - **Location:** El Dorado Hills, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $123,090.0 - $184,800.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Electronic Data Interchange (EDI), IT Management - **Published:** May 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2f5a74fa0eb9f8ef ## About the Role Do you have experience in Regulatory compliance?, Do you have a Bachelor's degree?, * Requires a bachelor's degree or equivalent experience * Requires at least 7 years of prior relevant experience * Previous experience working in the healthcare, pharmaceutical, biotechnology or related services industry is required * Knowledge of various information technology governance and control frameworks and industry standards such as COBIT, COSO, ITIL, PMBOK, AICPA SOC Trust Principles, and NIST is required * Knowledge of Artificial Intelligence (AI) governance and monitoring practices is preferred * Demonstrated experience as a governance, risk and compliance (GRC) expert is required * Requires business acumen, strategic thinking, financial analytical skills, and decision-making skills * Excellent communication and presentation skills at every level including executives is required * Experience working with healthcare partners and vendor contracts and understanding of the key components of basic agreements and how legal terms impact business terms and vice versa is preferred. ## Description The Technology and Data Trust Assurance Services team drives BSC technology and information security adherence to regulatory standards, as well as policies, standards, and controls development, with the goal of evaluating, directing and monitoring IT vendor performance, while safeguarding company assets and maintaining and securing the confidentiality, integrity, and availability of Blue Shield of California data . The Technology Risk and External Assurance program runs technology governance forums and manages technology risk from identification to risk consequence management for BSC. The Information Security Risk & Governance Specialist, Consultant will report to the Senior Manager, Technology Risk Assurance. In this role, you will be a key individual contributor to the Technology Risk and External Assurance team and Blue Shield's overall strategy and goals by providing consistent, coordinated technology governance, information security oversight, AI governance, technology risk assessment, and risk reporting in partnership with leaders, stakeholders, and Stellarus. Your Work In this role, you will: * Participate in technology risk governance activities (e.g., committees, presentation preparations, training and awareness, etc.) * Develop and implement technology governance programs, including technical performance oversight, AI governance, and data exchange and third-party risk governance that will help BSC understand its inherent and residual risk exposure * Assess AI tools, techniques, and procedures to enhance AI risk management capabilities throughout the company * Implement strategic goals established by BSC leadership * Be responsible for third-party security risk assessment activities ensuring Blue Shield's data is stored, transmitted, and processed in a secure manner * Enhance and conduct training and awareness activities to business teams and applicable third parties * Partner with cross functional operational business partners including Customer Experience, Customer Care, Markets, Health Solutions and Enterprise Risk Management to operationalize and socialize the IT risk management framework and program and to identify shifts in the organization's implicit risk appetite. * Lead and support the development of reporting processes to communicate progress of in-flight initiatives, risks and planned initiatives to senior executives and stakeholders in other business units ## Related Videos - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Should AI be Regulated? The Arguments For and Against](https://www.wearedevelopers.com/magazine/271-should-ai-be-regulated-the-arguments-for-and-against) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Panel Discussion: Responsible AI in Practice - Real-World Examples and Challenges](https://www.wearedevelopers.com/magazine/488-panel-discussion-responsible-ai-in-practice-real-world-examples-and-challenges) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)