Information Security Analyst II: GRC & Risk in Healthcare

Medical University of South Carolina; South Carolina; On-site; USD 78,000 - 110,000; Full time

Job summary

Medical University of South Carolina seeks an Information Security Specialist - Analyst II to advance governance, risk, and compliance across the university's academic, research, and healthcare missions. You will work with stakeholders to deliver recurring outputs and improve control activities.

You will translate control requirements into actionable guidance, support remediation tracking, and help safeguard confidentiality, integrity, and availability of information assets in a complex

Qualifications

• Bachelor’s degree or equivalent work experience, required.
• At least three (3) years of cybersecurity, compliance or audit experience.
• Role-relevant certification such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or equivalent.

Responsibilities

• Apply established methods to moderately complex governance, risk management, compliance, and operational issues.
• Coordinate with technical and business stakeholders and own recurring deliverables, reporting, and follow-up activities.
• Improve the accuracy, timeliness, and completeness of GRC and field operations outputs.
• Translate control requirements into actionable guidance and support remediation tracking.
• Help protect confidentiality, integrity, and availability of organizational information assets.

Skills

Control evidence review

Risk & compliance records

Audits or assessments

Established methods application

Stakeholder coordination

GRC tools

Documentation & reporting

Communication skills

Independent work

Education

Bachelor's degree

Job description

Medical University of South Carolina seeks an Information Security Specialist - Analyst II to advance governance, risk, and compliance across the university's academic, research, and healthcare missions. You will work with stakeholders to deliver recurring outputs and improve control activities.

You will translate control requirements into actionable guidance, support remediation tracking, and help safeguard confidentiality, integrity, and availability of information assets in a complex