Analyst, GRC

Thomas Jefferson University; Orlando (FL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Retirement plans

Flexible spending accounts

Job summary

Thomas Jefferson University seeks an information security professional to contribute to governance, risk, and compliance programs. You will apply policies, perform risk assessments, and promote regulatory alignment across the university.

This role uses data‑driven risk quantification, strengthens resilience, and fosters security awareness through training and exercises, collaborating with multiple units to protect assets and ensure compliant operations.

Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 3 years related work experience.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

GRC knowledge

Risk assessment

Regulatory compliance

Security awareness

Education

Bachelor's level in STEM or related

High School Diploma/GED + certifications

Job description

Number of Positions In Requisition 1 - Job Details

Contributes to the effective management of information security and resilience risks through domain expertise in areas such as regulatory compliance, risk management, security data engineering, or organizational resilience. This position applies information security policies and best practices, performs risk assessments, and ensures alignment with regulatory requirements. Uses data driven decision making to protect assets by identifying vulnerabilities, measuring risks, improving resilience, and promoting compliance through security awareness.

Job Description Summary

Contributes to the effective management of information security and resilience risks through domain expertise in areas such as regulatory compliance, risk management, security data engineering, or organizational resilience. This position applies information security policies and best practices, performs risk assessments, and ensures alignment with regulatory requirements. Uses data driven decision making to protect assets by identifying vulnerabilities, measuring risks, improving resilience, and promoting compliance through security awareness.

Job Duties

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.


• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.


• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.


• Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.


• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.


• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.


• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.


• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Minimum Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.


• 3 years related work experience.

Physical Demands

Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Work Shift

• Work Shift Workday Day (United States of America)


• Worker Sub Type Regular Employee

Primary Location

1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America

Company Overview

Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research. Thomas Jefferson University, home of Sidney Kimmel Medical College, Jefferson College of Nursing, and the Kanbar College of Design, Engineering and Commerce, dates back to 1824 and today comprises 10 colleges and three schools offering 200+ undergraduate and graduate programs to more than 8,300 students. Jefferson Health, nationally ranked as one of the top 15 not-for-profit health care systems in the country and the largest provider in the Philadelphia and Lehigh Valley areas, serves patients through millions of encounters each year at 32 hospitals campuses and more than 700 outpatient and urgent care locations throughout the region. Jefferson Health Plans is a not-for-profit managed health care organization providing a broad range of health coverage options in Pennsylvania and New Jersey for more than 35 years.

Equal Opportunity Statement

Jefferson is committed to providing equal educational and employment opportunities for all persons without regard to age, race, color, religion, creed, sexual orientation, gender, gender identity, marital status, pregnancy, national origin, ancestry, citizenship, military status, veteran status, handicap or disability or any other protected group or status.

Benefits

• medical (including prescription)


• supplemental insurance


• dental


• vision


• life and AD&D insurance


• short- and long-term disability


• flexible spending accounts


• retirement plans


• tuition assistance


• voluntary benefits, which provide colleagues with access to group rates on insurance and discounts.


• Tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service.


• Medical (including prescription) insurance for all colleagues, including those who work less than part-time (including per diem colleagues, adjunct faculty, and Jeff Temps).

Company Culture

In keeping with Jefferson's Mission, We Improve Lives, it is our goal to recruit, retain, develop and reward highly-qualified employees. Jefferson encourages its employees to expand their knowledge and develop their careers through growth opportunities and continuing education. With a long standing history, Jefferson has been advancing the medical field from the heart of Center City Philadelphia for nearly 200 years. Our Mission, We Improve Lives, expands to every corner of the organization. From our weekly farmer’s market, to our new Jefferson Accelerator Zone for innovation, our employees’ passion for the community is evident by the daily gestures towards our patients, students and each other.