GRC Associate Analyst: Risk, Compliance & Policy

Jefferson Health; Washington (Washington County); Hybrid; USD 55,000 - 75,000; Full time

Job summary

Jefferson Health is seeking an Associate Analyst Governance Risk and Compliance to help safeguard the organization by ensuring regulatory information security requirements are met and risks are effectively managed. You will assist in implementing a GRC program, applying policies and standards, and supporting risk assessments across business units and third parties.

Working with a multidisciplinary team, you will help quantify risk, track compliance metrics, and contribute to security awareness

Qualifications

• Bachelor’s degree in a related field.
• Less than 1 year related work experience.
• Understanding of regulatory information security requirements.
• Experience with risk assessments and security policies is a plus.

Responsibilities

• Assist in implementing an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Gather data to inform the team on security posture, resilience gaps, and emerging threats.
• Assist in prioritization and deployment of risk mitigation strategies using risk quantification methodologies.
• Advance the culture of compliance and resilience with awareness and training campaigns and tabletop exercises.
• Collaborate with team members to resolve governance, risk, and compliance issues.
• Contribute to development of KPIs and risk quantification to measure risk trends and compliance metrics.

Skills

GRC

Information security

Risk assessment

Policy development

Security training

Education

Bachelor’s Degree in related field

Job description

Jefferson Health is seeking an Associate Analyst Governance Risk and Compliance to help safeguard the organization by ensuring regulatory information security requirements are met and risks are effectively managed. You will assist in implementing a GRC program, applying policies and standards, and supporting risk assessments across business units and third parties.

Working with a multidisciplinary team, you will help quantify risk, track compliance metrics, and contribute to security awareness