GRC Associate Analyst: InfoSec & Compliance

Jefferson Health; Fort Washington (Montgomery County); On-site; USD 60,000 - 85,000; Full time

Job summary

Jefferson Health is seeking a junior information security professional to help enforce compliance frameworks and manage risk. You will support GRC activities, assist in risk assessments, and help translate security requirements into practical controls across the organization.

The role emphasizes collaboration with the security team to advance awareness, resilience, and regulatory alignment while developing core information security competencies in a hospital systems context.

Qualifications

• Bachelor’s degree in a related field is required.
• Experience with information security concepts and controls is preferred.
• Understanding of regulatory standards and risk management.

Responsibilities

• Assist in implementing GRC programs and tools aligned with regulatory requirements.
• Apply information security policies and procedures to support resilience.
• Help conduct risk assessments including business impact and third party risks.
• Assist in prioritizing risk mitigation using quantified methods.
• Support security awareness and training campaigns across the organization.
• Collaborate with team members to interpret requirements and resolve issues.

Skills

Information security fundamentals

Regulatory compliance

Education

Bachelor's Degree in related field

Job description

Jefferson Health is seeking a junior information security professional to help enforce compliance frameworks and manage risk. You will support GRC activities, assist in risk assessments, and help translate security requirements into practical controls across the organization.

The role emphasizes collaboration with the security team to advance awareness, resilience, and regulatory alignment while developing core information security competencies in a hospital systems context.