Information Security Analyst II, GRC at Trillium Health Resources

Wheaton; Oregon (IL); Remote; USD 55,000 - 86,000; Full time

Job summary

An established industry player is seeking an Information Security Analyst II to join their dynamic IT Security & Operations team. This role is pivotal in ensuring the organization meets SOC 2 Type II compliance while developing essential security procedures. You'll engage in risk assessments, audits, and collaborate with various stakeholders to enhance security governance. With a focus on work-life balance, this innovative firm offers a remote work option and a supportive environment that fosters professional growth. If you're passionate about making a meaningful impact in the field of information security, this opportunity is for you.

Benefits

Health Insurance - no premium for employee coverage

Flexible Spending Accounts

Paid Time Off (PTO) of 24 days

12 paid holidays

401k with 5% employer match

Public Service Loan Forgiveness Qualifying Employer

Qualifications

• 3+ years in IT Governance, Risk & Compliance Management or IT Security Operations.
• Certifications in Security+, ITIL, CISSP, or equivalent preferred.

Responsibilities

• Assist with risk assessments and security audits for compliance.
• Develop and maintain security processes and documentation.
• Work with IT teams to analyze risks and prioritize remediations.

Skills

IT Governance

Risk Management

Compliance Management

IT Security Operations

IT Auditing

Education

High School diploma/GED

Associate’s degree

Tools

GRC Platform

Job description

You are viewing a preview of this job. Log in or register to view more details about this job.

Working Title: Information Security Analyst II, GRC

FLSA Status: Exempt

Posting Salary Range: $55,167 - $85,409

Office Location: Remote within United States.

POSTING DETAILS:

Make an Impact

Trillium Health Resources is a Tailored Plan and Managed Care Organization (MCO) that manages serious mental health, substance use, traumatic brain injury, and intellectual/developmental disability services in North Carolina. Serving in 46 counties, we help individuals and their families strengthen well-being and build foundations for a healthy life.

Join our team as we empower others to live their best lives by providing access to quality healthcare. We offer a challenging, engaging work environment where staff take home more than a paycheck. Every day, we see the results of our dedication – in the smiles of children on our accessible playgrounds and in the pride on the face of an adult cooking a meal for the first time. Working at Trillium Health Resources is more than just a job; it is an opportunity to make a direct impact on the communities we serve.

At Trillium, we know that empowering others begins with supporting and developing our team. That’s why we offer competitive benefits and work-from-home flexibility so that our employees thrive outside of the office. We’re also committed to building a diverse, inclusive culture where all employees have the potential to grow professionally and personally.

What We’re Looking For

Trillium Health Resources has a career opening for an Information Security Analyst II, GRC to join our IT Security & Operations. This position’s primary responsibilities include assisting with internal and external resources to ensure the security program and the organization is SOC 2 Type II compliant; ensure procedures are developed throughout the organization where a procedure is required and other areas of the security program as they are developed.

On a typical day, you might:

• Assist with the risk assessment and other processes in the Trillium GRC Platform
• Assist with all information security risk assessments including Vendor Risk Assessments
• Assist with Security Audits
• Assist with the Information Security Governance, Risk, and Compliance program, developing and maintaining processes, and documentation.
• Assist business and IT stakeholders with SOC 2 control understanding, application, and evidence collection
• Work with teams across IT and the business to analyze risk and prioritize remediations
• Assist to ensure compliance for all security controls
• Assist with exceptions through a comprehensive risk analysis process
• Understand and discuss security policies and standards and how they align with the business
• Cross train with other security teams to understand and cover other aspects of the security program

Employee Benefits:

Trillium knows that work/life balance is important. That’s why we offer our employees competitive benefits and flexibility that is second to none. Take a look at what we have to offer:

• Typical working hours are 8:30am-5pm
• A remote work option available for most positions
• Health Insurance - no premium for employee coverage
• Flexible Spending Accounts
• Paid Time Off (PTO) of 24 days, plus 12 paid holidays within first year of employment
• 401k with 5% employer match & immediate vesting
• Public Service Loan Forgiveness Qualifying Employer

Qualifications:

Education/Experience:
High School diploma/GED with three (3) years of experience in IT Governance, Risk & Compliance Management, IT Auditing, IT Security Operations, or relevant business experience. Requires certification. OR
Associate’s degree with one (1) year of experience in IT Governance, Risk & Compliance Management, IT Auditing, IT Security Operations, or relevant business experience. Requires certification.
OR
Equivalent combination of education/experience/certification.

*Applicable certification(s) may be substituted to equivalent degree and experience requirements.

Preferred Education: An Associates degree is preferred.

License/Certification: High School/GED and Two-Year degrees require certification.
Must have a valid driver’s license.

Preferred License/Certification: Certification in Security+, ITIL, CIPP/US, CGEIT, CISSP, CISM, CISA, CTEL or CRISC or an equivalent certification will be accepted.

Location: Remote within the United States.

Deadline for application: Friday, March 28, 2025 at 11:59 p.m.

To be considered for employment, all candidates are required to submit an application through ADP and upload a current resume. Your resume must provide your level of education and detailed work experience, including:

• Employer Name
• Dates of service (month & year)
• Average number of hours worked per week
• Essential duties of the job as related to the position you’re applying for
• Education
• Degree type
• Date degree was awarded
• Institution
• Licensure/certification, if applicable

After submitting your application through our career center in ADP, your resume will be reviewed to ensure that your skills and experience meet the essential criteria for the role you have applied for.

You will be notified by HR on the status of your application as appropriate. All applicants will receive a final email when the recruitment cycle for the position has closed.

Join our Talent Community through our ADP career center to stay informed about positions you may qualify for. Remember to keep an update resume in the Talent Community profile.

The diversity of the communities we serve is reflected in our employees. Trillium Health Resources is an Equal Employment Opportunity (EEO) employer.

Trillium Health Resources is a drug-free workplace. Candidates are required to pass a drug test as a condition of employment.