Cybersecurity GRC Analyst II - Drive Risk & Compliance

Jefferson Health; Washington (Washington County); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Retirement plans

Tuition assistance

Flexible spending accounts

Job summary

Jefferson Health is seeking a CyberSecurity Analyst II to manage information security and resilience risks. You will contribute to GRC programs, develop policies, and perform advanced risk assessments to ensure regulatory alignment and robust security posture across the organization.

Responsibilities include delivering executive dashboards, enhancing security awareness, and collaborating with cross-functional teams to embed best practices and compliance into operational policies and procedures.

Qualifications

• Develops and enforces information security policies and procedures.
• Performs risk assessments, including business impact and third-party risks.
• Uses data-driven decision making to protect assets and improve resilience.
• Supports governance, risk, and compliance (GRC) programs and tools.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools.
• Develop and enforce enterprise-wide information security policies, standards, and procedures.
• Perform risk assessments and synthesize data to inform senior leadership on security posture.
• Develop executive dashboards and data pipelines to measure risk trends and compliance metrics.

Education

Bachelor’s Degree in STEM

Job description

Jefferson Health is seeking a CyberSecurity Analyst II to manage information security and resilience risks. You will contribute to GRC programs, develop policies, and perform advanced risk assessments to ensure regulatory alignment and robust security posture across the organization.

Responsibilities include delivering executive dashboards, enhancing security awareness, and collaborating with cross-functional teams to embed best practices and compliance into operational policies and procedures.