GRC Analyst: InfoSec & Compliance

jeffersonhealth; Pennsylvania; On-site; USD 70,000 - 110,000; Full time

Job summary

Jefferson Health in Fort Washington, PA, seeks a junior information security professional to support Governance, Risk, and Compliance (GRC) programs, align activities with regulatory requirements, and help quantify and mitigate information security risks.

You will assist in developing policies, conducting risk assessments, supporting awareness campaigns, and coordinating with business units to strengthen resilience and compliance across the organization.

Qualifications

• Bachelor's Degree in related field
• Less than 1 year related work experience

Responsibilities

• Assist in implementing an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, aligning with regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including handling policy exceptions.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and cloud system assessments; gather data on security posture.
• Assist in prioritizing and deploying risk mitigation strategies using risk quantification methodologies, coordinating with business units and external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and training campaigns.
• Collaborate with team members to interpret requirements and resolve governance, risk and compliance issues.
• Contribute to developing KPIs and risk metrics to measure and communicate risk trends and security objectives within the GRC team.

Skills

GRC

risk assessments

policies

compliance

awareness

Education

Bachelor's degree

Tools

GRC tools

Job description

Jefferson Health in Fort Washington, PA, seeks a junior information security professional to support Governance, Risk, and Compliance (GRC) programs, align activities with regulatory requirements, and help quantify and mitigate information security risks.

You will assist in developing policies, conducting risk assessments, supporting awareness campaigns, and coordinating with business units to strengthen resilience and compliance across the organization.