Associate Analyst Governance Risk and Compliance

jeffersonhealth; Pennsylvania; On-site; USD 70,000 - 110,000; Full time

Job summary

Jefferson Health in Fort Washington, PA, seeks a junior information security professional to support Governance, Risk, and Compliance (GRC) programs, align activities with regulatory requirements, and help quantify and mitigate information security risks.

You will assist in developing policies, conducting risk assessments, supporting awareness campaigns, and coordinating with business units to strengthen resilience and compliance across the organization.

Qualifications

• Bachelor's Degree in related field
• Less than 1 year related work experience

Responsibilities

• Assist in implementing an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, aligning with regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including handling policy exceptions.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and cloud system assessments; gather data on security posture.
• Assist in prioritizing and deploying risk mitigation strategies using risk quantification methodologies, coordinating with business units and external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and training campaigns.
• Collaborate with team members to interpret requirements and resolve governance, risk and compliance issues.
• Contribute to developing KPIs and risk metrics to measure and communicate risk trends and security objectives within the GRC team.

Skills

GRC

risk assessments

policies

compliance

awareness

Education

Bachelor's degree

Tools

GRC tools

Job description

Number of Positions In Requisition

1

Job Details

Responsible for ensuring that the organization adheres to regulatory information security requirements, manages information security risks effectively, and implements robust compliance frameworks. Develops and enforces information security policies, conducts risk assessments, and ensures alignment with legal and regulatory standards. Safeguards organizational assets by identifying vulnerabilities, mitigating and quantifying risks, advancing downtime resilience, and fostering a culture of compliance through security awareness.

Job Description

Summary

Responsible for ensuring that the organization adheres to regulatory information security requirements, manages information security risks effectively, and implements robust compliance frameworks. Develops and enforces information security policies, conducts risk assessments, and ensures alignment with legal and regulatory standards. Safeguards organizational assets by identifying vulnerabilities, mitigating and quantifying risks, advancing downtime resilience, and fostering a culture of compliance through security awareness.

Job Duties

Assist in the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.

Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.

Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Gather data to inform the team on security posture, resilience gaps, and emerging threats.

Assist in the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.

Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.

Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.

Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Participate in training and learning opportunities to develop skills and stay current with information security best practices

Minimum Qualifications

Bachelor's Degree in related field

Less than 1 year related work experience

Physical Demands

Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Job Description Disclaimer:

This position description provides the major duties/responsibilities, requirements and working conditions for the position. It is intended to be an accurate reflection of the current position, however management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.

Work Shift

Workday Day (United States of America)

Worker Sub Type

Regular

Employee Entity

Thomas Jefferson University Primary Location Address

1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America

Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research. Thomas Jefferson University , home of Sidney Kimmel Medical College, Jefferson College of Nursing, and the Kanbar College of Design, Engineering and Commerce, dates back to 1824 and today comprises 10 colleges and three schools offering 200+ undergraduate and graduate programs to more than 8,300 students. Jefferson Health , nationally ranked as one of the top 15 not-for-profit health care systems in the country and the largest provider in the Philadelphia and Lehigh Valley areas, serves patients through millions of encounters each year at 32 hospitals campuses and more than 700 outpatient and urgent care locations throughout the region. JeffersonHealthPlansisanot-for-profit managed health care organization providing a broad range of health coverage options in Pennsylvania and New Jersey for more th