Information Security Governance, Risk and Compliance Analyst II

Saint Luke's Health System; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Saint Luke's Health System seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet defined security controls, conduct vulnerability analyses, and assess risk. You will lead remediation activities and mentor junior staff in a security-aware organization.

Ideal candidates have 3–5 years of applicable experience and a Bachelor’s Degree (or equivalent). This is a full-time role based in the United States within a healthcare setting.

Qualifications

• 3–5 years of applicable experience in information security.
• Bachelor’s Degree or equivalent experience.

Responsibilities

• Lead internal and external security reviews, audits, and controls evaluations.
• Prepare security awareness training and phishing campaigns to enable a security aware organization.
• Provide guidance and training for and mentor junior staff.
• Identify gaps in security design or controls and implement remediation or mitigating controls.
• Support development and reporting on security metrics.
• Perform vendor information security assessments.
• Ensure alignment of information security controls and processes with industry standards.
• Lead IT risk assessment projects.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with key stakeholders to gain a common understanding of deficiencies/gaps.
• Analyze compliance requirements.

Skills

Security governance

Risk assessment

Security awareness

Mentoring

Education

Bachelor’s Degree

Job description

Job Description

The Information Security Governance, Risk & Compliance Analyst II will ensure information technology processes meet defined security controls and perform vulnerability analyses and risk assessments against the adequacy of those security controls. They will facilitate and manage risk-based control remediation activities. Equivalent experience can be used in lieu of degree.

• Leads internal and external security reviews, audits, and controls evaluations.

• Prepares security awareness training and phishing campaigns to enable a security aware organization

• Provides guidance and training for and mentors junior staff.

• Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls.

• Supports the development, and report on security metrics.

• Performs vendor information security assessments.

• Ensure alignment of information security controls and processes with industry standards.

• Lead IT Risk Assessment projects.

• Perform ongoing monitoring of third-party vendors.

• Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap.

• Analyze compliance requirements

Job Requirements

Applicable Experience:

3-5 years

Bachelor’s Degree

Job Details

Full Time

Day (United States of America)