Information Security GRC Analyst

Beyond Blue Job Posting

Title:

Information Security GRC Analyst

Requisition Number: R
- Department Name:
Executive Director, Governance, Risk, and Compliance

Work Location:

Remote-KY Grade Level: 10 Type of Position:
Regular Position Time Status:
Full time Equivalency Link (Use the "Apply for this Job" box below). Shift: Days (United States of America)

Responsible for supporting IT governance, risk management, and compliance (GRC) activities across the organization. Provides monitoring, documentation, and reporting to ensure alignment with policies, regulatory requirements, and industry standards. Assists in risk assessments, compliance reviews, and audit preparation. Coordinates with IT teams, business stakeholders, and vendors to support security control implementation. Contributes to process improvements and helps maintain the organization’s overall security posture.

• Supports governance activities by documenting IT policies, procedures, and compliance evidence.
• Assists in conducting risk assessments and compliance reviews for systems, applications, and vendors.
• Monitors security and compliance metrics, reporting findings to senior analysts or management.
• Tracks remediation of identified risks and follows up with stakeholders to ensure timely resolution.
• Prepares materials for internal and external audits, supporting audit readiness and evidence collection.
• Collaborates with IT and business teams to ensure adherence to regulatory requirements (HIPAA, SOX, PCI-DSS, GDPR, etc.).
• Assists in evaluating third-party vendor contracts for security and compliance requirements.
• Contributes to security awareness and compliance training efforts for employees and staff.
• Participates in continuous improvement of GRC processes and documentation practices.
• Performs other duties as assigned.

Bachelor’s degree in cybersecurity, computer science, or a related field

2+ years of experience in cybersecurity, computer science, or a relevant area

An equivalent combination of education and experience may be considered. All experience must be paid and in the same related field. Part-time and PRN experience will be prorated based on hours worked per week. Volunteer work and internships for academic credit are not counted.

N/A

• A. Lifting, pushing, and/or pulling objects up to 50lbs: 2.
• B. Lifting, pushing, and/or pulling objects over 50lbs: 1. Never
• C. Standing or walking with objects up to 10lbs: 2. Occasional (< 10% of the time)
• D. Standing or walking with objects up to 25lbs: 1. Never
• E. Sitting at computer workstation for extended periods:
  4. Regular (> 50% of the time)
• F. Risk of back injury from moving, lifting or positioning patients, equipment, or materials:
  1. Never
• G. Repetitive motion:
  3. Intermittent (10% - 50% of the time)
• H. Working at heights above 4 feet:
  1. Never
• I. Working in confined spaces:
  1. Never
• J. Risk of injuries from use of equipment on the job: 1. Never
• K. Job-related travel:
  2. Occasional (< 10% of the time)
• L. Loud noises:
  1. Never
• M. Temperature extremes:
  1. Never
• N. Hazardous chemicals and fumes including waste:
  1. Never
• O. Radiation:
  1. Never
• P. Burns:
  1. Never
• Q. Cuts/Punctures:
  1. Never
• R. Bloodborne/airborne pathogens:
  1. Never
• S. Recombinant DNA or viral vectors:
  1. Never
• T. Combative/violent people:
  1. Never
• U. Animal handling (including carcasses): 1. Never
• V. Please specify other(s) and amount of exposure (i.e. Occasional, Intermittent or Regular): N/A

This position requires regular sitting at a computer workstation for extended periods of time; performing tasks with intermittent repetitive motion (such as typing); and occasionally standing or walking with objects weighing up to 10 pounds, as well as lifting, pushing, and/or pulling objects weighing up to 50 pounds.

We value the well-being of each of our employees and are dedicated to creating a healthy place for everyone to work, learn and live. In the interest of maintaining a safe and healthy environment for our students, employees, patients and visitors, the University of Kentucky is a Tobacco &…