GRC Risk & Compliance Specialist

Jefferson Health; Washington (Washington County); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Jefferson Health is seeking an Information Security and Resilience professional to contribute to an integrated GRC program and govern risk across regulatory requirements. The role applies security policies, performs risk assessments, and improves resilience through data-driven decisions.

You will advance compliance culture with awareness training and tabletop exercises while collaborating with teams to quantify risk and report on trends.

Qualifications

• Bachelor’s degree in science, technology, engineering, or math or equivalent.
• 3 years related work experience required.
• Alternative: HS diploma with preferred certifications and 3+ years in information security.

Responsibilities

• Contribute to a GRC program and tools aligned with regulatory requirements.
• Apply enterprise information security policies, standards, and procedures.
• Perform risk assessments including BIA, third party, and cloud assessments.
• Synthesize data to inform the team on security posture and threats.
• Contribute to risk mitigation strategies using quantified methods.
• Promote information security awareness and training campaigns.
• Collaborate to interpret requirements and resolve GRC issues.
• Develop KPIs and risk quantification to communicate trends.

Skills

GRC

Risk assessments

Regulatory compliance

Security policies

Security awareness

Data-driven decision making

Education

Bachelor's degree in STEM

High School Diploma/GED with certifications

Job description

Jefferson Health is seeking an Information Security and Resilience professional to contribute to an integrated GRC program and govern risk across regulatory requirements. The role applies security policies, performs risk assessments, and improves resilience through data-driven decisions.

You will advance compliance culture with awareness training and tabletop exercises while collaborating with teams to quantify risk and report on trends.