GRC Analyst: Information Security & Risk

Jefferson Health; Washington, Northern (Washington County, KY); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical Insurance

Tuition Assistance

Job summary

Jefferson Health is seeking an Analyst in GRC to help manage information security and resilience risks across regulatory domains, risk management, and security data engineering. The role applies security policies, conducts risk assessments, and ensures alignment with regulatory requirements.

You will contribute to an integrated GRC program, support policy standards, perform third-party and cloud risk assessments, promote awareness, and help develop KPIs to measure risk trends and compliance

Qualifications

• Bachelor’s degree in a science, technology, engineering, or math discipline or a related field.
• 3 years related work experience.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

Regulatory compliance

Risk management

GRC tools

Security data engineering

Organizational resilience

Education

Bachelor’s degree in STEM or related field

Tools

GRC platforms

Job description

Jefferson Health is seeking an Analyst in GRC to help manage information security and resilience risks across regulatory domains, risk management, and security data engineering. The role applies security policies, conducts risk assessments, and ensures alignment with regulatory requirements.

You will contribute to an integrated GRC program, support policy standards, perform third-party and cloud risk assessments, promote awareness, and help develop KPIs to measure risk trends and compliance