Information Security Governance, Risk and Compliance Analyst II

Saint Luke's; Kansas City (MO); On-site; USD 85,000 - 115,000; Full time

Job summary

Saint Luke's in Kansas City, MO seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet security controls and perform vulnerability analyses and risk assessments.

Responsibilities include leading security reviews, training, mentoring junior staff, identifying gaps, and coordinating remediation with stakeholders while aligning with industry standards.

Qualifications

• Equivalent experience can be used in lieu of degree.
• Leads internal security reviews, audits, and control evaluations.
• Prepares security awareness training and phishing campaigns.

Responsibilities

• Leads internal and external security reviews, audits, and controls evaluations.
• Prepares security awareness training and phishing campaigns to enable a security aware organization
• Provides guidance and training for and mentors junior staff.
• Identify gaps in security design or controls and implement remediation or mitigating controls.
• Supports development and reporting of security metrics.
• Performs vendor information security assessments.
• Ensure alignment of information security controls with industry standards.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with stakeholders to understand deficiencies and gaps.

Skills

Security governance

Risk assessment

Vulnerability analysis

Security audits

Security training

Mentoring

Vendor assessments

Security metrics

Industry standards

Education

Equivalent experience in lieu of degree

Tools

NIST CSF

ISO 27001

Job description

Job Description

The Information Security Governance, Risk & Compliance Analyst II will ensure information technology processes meet defined security controls and perform vulnerability analyses and risk assessments against the adequacy of those security controls. They will facilitate and manage risk-based control remediation activities. Equivalent experience can be used in lieu of degree.

• Leads internal and external security reviews, audits, and controls evaluations.
• Prepares security awareness training and phishing campaigns to enable a security aware organization
• Provides guidance and training for and mentors junior staff.
• Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls.
• Supports the development, and report on security metrics.
• Performs vendor information security assessments.
• Ensure alignment of information security controls and processes with industry standards.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap.