GRC Risk & Compliance Specialist

Jefferson Health; Fort Washington (Montgomery County); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision

Tuition assistance

Retirement plans

Job summary

Jefferson Health is seeking a security and resilience-focused professional to manage information security programs, perform risk assessments, and ensure regulatory alignment across the organization. The role emphasizes data-driven decision making, vulnerability identification, and risk mitigation to protect assets and promote compliance.

The position involves implementing GRC processes, conducting third-party and cloud assessments, and driving security awareness and resilience training across

Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline.
• High School Diploma/GED and preferred certifications.
• 3 years related work experience.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

Regulatory compliance

Risk management

Security data engineering

Organizational resilience

Education

Bachelor’s Degree in STEM

High School Diploma/GED

Job description

Jefferson Health is seeking a security and resilience-focused professional to manage information security programs, perform risk assessments, and ensure regulatory alignment across the organization. The role emphasizes data-driven decision making, vulnerability identification, and risk mitigation to protect assets and promote compliance.

The position involves implementing GRC processes, conducting third-party and cloud assessments, and driving security awareness and resilience training across