Sr GRC Analyst

Job Summary

The Sr GRC Analyst plays a key role in supporting the organization’s governance, risk, and compliance program by leading complex risk assessments, advising stakeholders on security and compliance matters, and contributing to risk management strategy. The analyst evaluates security controls, supports audits and regulatory initiatives, and assists in the development and refinement of policies, standards, and procedures. The analyst partners with business, technical, and compliance teams to identify, analyze, and mitigate information security risks while promoting a culture of security and accountability.

Through use of GRC tools and continuous professional development, the role strengthens the organization’s security posture and supports strategic risk management initiatives.

• Bachelor’s Degree in Information Systems or Business Management and at least 5 years of related industry experience
• or High School Diploma or GED and at least 9 years of related industry experience
• Certification:
  Certified Information Privacy Professional, Certified IS Auditor, Certified IS Manager, Certified Information Systems Security Professional, Certified in Risk and Information Systems Control, Global Information Assurance Certification, or Health Care IS and Privacy Practitioner. Certification must be obtained within 12 months of starting the position

• Exceptional verbal communication, including public speaking
• Strong writing and correspondence skills

• MS Word
• General personal computer skills

• Analytical abilities
• Knowledge of HIPAA Security Rule, HITECH, and Payment Card Industry (PCI) standards
• Experience with Service Now and Power BI (preferred)
• Experience evaluating, reviewing, and reporting on information systems and applications including EPIC, Windows, Unix, IBM, and Cisco

Eligible for telecommute