Cybersecurity GRC Analyst

Mercyhealth is hiring for the role of Cybersecurity GRC Analyst, Janesville, WI (Hybrid). This is a Cybersecurity role in the governance, risk, and compliance field. Review the full details below.

Mercyhealth is hiring for this Cybersecurity role in Janesville
, one of the metros GRC Careers tracks for governance, risk, and compliance hiring.

Assesses third-party vendors for security risks and maintains the internal IT risk register. Performs targeted cybersecurity risk assessments to identify vulnerabilities and HIPAA compliance deviations. Coordinates between IT, Legal, and Compliance to maintain corporate security policies and standards.

This role is based in Janesville on-site. Local candidates benefit from being close to Mercyhealth's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands‑on operations. Roles like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control‑assurance practices.

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board‑level reporting. In your resume and outreach, tie your experience to how Mercyhealth would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control‑assurance practices, and lead with concrete outcomes rather than duties.

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.