GRC Risk & Compliance Specialist

Jefferson Health Plans; Pennsylvania; On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental & vision

Retirement plan

Tuition assistance

Job summary

Jefferson Health Plans in Pennsylvania is seeking an information security professional to contribute to governance, risk and compliance efforts. You will apply security policies, perform risk assessments, and align with regulatory requirements to protect assets and ensure resilience.

You will implement GRC programs, manage risks across business units, educate on security awareness, and develop metrics to track compliance and resilience.

Qualifications

• Bachelor's degree in a science, technology, engineering, or math discipline.
• 3 years related work experience
• Strong analytical and communication skills.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

GRC management

Risk assessment

Regulatory compliance

Info security policies

Security awareness

Education

BSc in STEM field

High School Diploma or GED

Tools

GRC tools

Job description

Jefferson Health Plans in Pennsylvania is seeking an information security professional to contribute to governance, risk and compliance efforts. You will apply security policies, perform risk assessments, and align with regulatory requirements to protect assets and ensure resilience.

You will implement GRC programs, manage risks across business units, educate on security awareness, and develop metrics to track compliance and resilience.