GRC & InfoSec Risk Analyst

jeffersonhealth; Pennsylvania; On-site; USD 90,000 - 120,000; Full time

Job summary

Jefferson Health is seeking an information security professional to contribute to the management of information security and resilience risks. The role focuses on regulatory compliance, risk management, and GRC program support across the enterprise.

You will perform risk assessments, apply security policies, and help quantify risk to inform leadership decisions and improve organizational resilience and security awareness.

Qualifications

• Bachelor's degree in a science, technology, engineering, or math discipline.
• High School Diploma or GED with preferred certifications.
• 3 years related work experience.

Responsibilities

• Support the implementation of an integrated GRC program and tools.
• Apply enterprise information security policies and procedures to support robust information security and resilience.
• Perform risk assessments including BIA and third party risk assessments.
• Synthesize data to inform risk posture and resilience gaps and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies.
• Assist with enterprise-level information security awareness and training campaigns.

Skills

Governance

Risk assessment

Regulatory compliance

Security data engineering

Threat monitoring

Education

Bachelor's degree in a science/engineering/math field

High School Diploma/GED with certifications

Tools

GRC tools

Job description

Jefferson Health is seeking an information security professional to contribute to the management of information security and resilience risks. The role focuses on regulatory compliance, risk management, and GRC program support across the enterprise.

You will perform risk assessments, apply security policies, and help quantify risk to inform leadership decisions and improve organizational resilience and security awareness.