GRC Analyst: Cyber Risk & Compliance Expert

Cone Health; Greensboro (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Cone Health is seeking an Intermediate GRC Analyst to collaborate with process owners, internal and external auditors, and stakeholders to review, monitor, and resolve cybersecurity risk. You will support HITRUST, HIPAA and NIST CSF audits and attestations and help manage IT compliance with SOC2, ISO 27001, PCI-DSS and SOX.

This role contributes to maturing the organization’s compliance program. The ideal candidate has a Bachelor's degree and 5 years of relevant experience, plus CISA

Qualifications

• Bachelor's Degree or equivalent experience required.
• Minimum 5 years of experience in governance, risk and compliance.
• CISA certification required within 12 months.

Responsibilities

• Lead third party risk assessments and reporting.
• Manage risk and vulnerability assessments, validation testing, and audits per NIST and HITRUST.
• Maintain central repository for security risks and audit evidence.
• Maintain security standards and policies on an annual basis.
• Manage security awareness training program for associates.
• Collaborate with legal and compliance teams to align policies and controls with regulations.
• Conduct internal audits to assess effectiveness of security controls.
• Perform other duties as assigned.

Skills

Risk assessments

Audits

Security controls

Regulatory compliance

Policy management

Education

Bachelor's Degree

Job description

Cone Health is seeking an Intermediate GRC Analyst to collaborate with process owners, internal and external auditors, and stakeholders to review, monitor, and resolve cybersecurity risk. You will support HITRUST, HIPAA and NIST CSF audits and attestations and help manage IT compliance with SOC2, ISO 27001, PCI-DSS and SOX.

This role contributes to maturing the organization’s compliance program. The ideal candidate has a Bachelor's degree and 5 years of relevant experience, plus CISA