Information Security Governance, Risk and Compliance Analyst II

Saint Luke's Health System; Kansas City (MO); On-site; USD 80,000 - 110,000; Full time

Job summary

Saint Luke’s Health System is seeking an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet security controls, perform vulnerability analyses, and conduct risk assessments. You will lead remediation efforts, security reviews, and training to foster a security-aware organization while mentoring junior staff.

Responsibilities include identifying gaps, implementing mitigations, reporting security metrics, and conducting third-party vendor assessments with

Qualifications

• 3–5 years of applicable experience.
• Equivalent experience accepted in lieu of degree.
• Experience with security reviews, audits and controls evaluations.
• Experience leading risk assessment and remediation activities.
• Ability to develop and report security metrics.

Responsibilities

• Ensure IT processes meet defined security controls and perform vulnerability analyses and risk assessments.
• Lead risk-based control remediation activities and security reviews/audits.
• Prepare security awareness training and phishing campaigns.
• Mentor junior staff and guide security design improvements.
• Identify gaps in controls and implement remediation or mitigations.
• Collaborate with stakeholders to understand deficiencies and drive remediation.
• Support third-party vendor risk assessments and ongoing monitoring.
• Develop security metrics and reporting for leadership.

Skills

Information security

Risk assessment

Vulnerability analysis

Audits

Security controls

Vendor risk

Security metrics

Stakeholder collaboration

Education

Bachelor's degree

Job description

Job Description

The Information Security Governance, Risk & Compliance Analyst II will ensure information technology processes meet defined security controls and perform vulnerability analyses and risk assessments against the adequacy of those security controls. They will facilitate and manage risk-based control remediation activities. Equivalent experience can be used in lieu of degree. Leads internal and external security reviews, audits, and controls evaluations. Prepares security awareness training and phishing campaigns to enable a security aware organization Provides guidance and training for and mentors junior staff. Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls. Supports the development, and report on security metrics. Performs vendor information security assessments. Ensure alignment of information security controls and processes with industry standards. Lead IT Risk Assessment projects. Perform ongoing monitoring of third-party vendors. Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap. Analyze compliance requirements

Job Requirements

Applicable Experience: 3-5 years Bachelor's Degree

Job Details

Full Time Day (United States of America) Saint Luke’s Health System includes 18 hospitals and campuses across the Kansas City region, home care and hospice, behavioral health care, dozens of physician practices, a life care senior living community, and more. Find out more about what Saint Luke’s offers: http://www.saintlukeskc.org/about-saint-lukes