Information Security GRC Analyst IV - ESH

CareSource; United States; À distance; USD 113 000 - 198 000; Plein temps

Résumé du poste

CareSource is seeking an Information Security GRC Analyst IV to manage day-to-day risk and compliance programs, ensuring activities stay within policy and risk tolerance. The role spans strategic planning, control design, and coordination with auditors and regulators to protect information assets.

The ideal candidate has extensive IT security risk experience, strong communication skills, and a proven ability to lead cross-functional initiatives, with a focus on governance, risk, and compliance.

Qualifications

• Bachelor’s degree is required
• Ten years of IT, IT risk, or security experience required
• Master’s degree is preferred
• Certifications in information security preferred (CISSP/CRISC/CISA/CISM/SSCP)

Responsabilités

• Collaborate with stakeholders to implement information security risk and compliance controls
• Measure, monitor, report cybersecurity risk and security metrics
• Report exceptions to risk management policies to senior management
• Develop risk mitigation plans with staff or vendors
• Maintain evidence of internal IT controls for audits and regulators
• Serve as primary liaison for IT audits with auditors and regulators
• Lead security strategy with department leaders
• Present analyses and validate requirements for strategic initiatives
• Build staff expertise and oversee project work
• Deliver clear, engaging security presentations

Connaissances

Risk assessment

Stakeholder communication

IT audit & compliance

Security governance

Project management

Vendor management

Auditing

Policy

Formation

Bachelor’s degree in IT, CS, or related field

Master’s degree preferred

Certifications CISSP/CRISC/CISA/CISM/SSCP preferred

Description du poste

Job Summary:

The Information Security GRC Analyst IV manages day to day, short and long term information security risk and compliance programs. They also ensure activities are within risk tolerance and in compliance with approved policies, procedures and standards.

Essential Functions:

• Collaborate with key stakeholders and customers in the execution of the processes and controls related to information security risk and compliance to protect business interests and achieve business goals
• Responsible for the measurement, monitoring, communicating, and reporting of cybersecurity risk, security metrics, risk mitigation plans, and status of execution of strategic and tactical plans
• Regularly assess and report to management any exceptions to information risk management policies, procedures, and standards
• Engage staff and/or vendors to develop information security risk mitigation plans to address risks identified
• Design, review, mature, and manage a framework of internal IT controls sufficient to effectively protect the confidentiality, integrity, and availability of information assets critical to the business, maintaining robust evidence of controls and representing these records to internal and external auditors and regulators
• Will serve as the primary point of contact and liaison between any internal or external auditors and regulators for the purpose of facilitating IT audits and assessments, minimizing the impact and disruption to IT personnel
• Work with the department leadership in establishing security strategy, goals, and objectives
• Facilitate overall analysis, design, artifacts, and technical requirements validation for strategic initiatives
• Acts as an expert in functional domain
• Build employee knowledge and skills in specific areas of expertise
• Oversee and provide guidance of all aspects associated with enhancement or project work
• Demonstrate business and technical acumen proficiency
• Deliver engaging, informative, and well-organized presentations
• Effectively execute and communicate change management
• Perform any other job related duties as requested.

Education and Experience:

• Bachelor’s degree is required
• Master’s degree is preferred
• Equivalent years of relevant work experience may be accepted in lieu of required education
• Ten (10) years of IT, IT Risk, or Security experience required
• Five (5) years of Security Risk or Program Management experience preferred
  Competencies, Knowledge and Skills:
• Ability to effectively prioritize and execute tasks while working both independently and in a team-oriented, collaborative environment
• Strong interpersonal skills including excellent written and verbal communication skills; listening and critical thinking; presentation skills, facilitation skills
• Strong organizational skills to help prioritize and manage workload
• Ability to establish effective working relationships with stakeholders at all different levels
• Flexibility during organizational and/or business changes
• Ability to manage multiple projects while demonstrating a sense of urgency
• Effective problem-solving skills with attention to detail
• Effectively disseminates information to appropriate audiences verbally and in writing
• Ability to actively foster appropriate level of participation within teams and gather essential input to enable decision-making
• Working technical knowledge/experience of the following: IT Audit/Compliance/Risk, Security/Management, Project/Program Management
  Licensure and Certification:
• Certifications in Information Security, such as CISSP, CRISC, SSCP, CISA, CISM preferred
• Project Management Professional (PMP) preferred
  Working Conditions:
• General office environment; may be required to sit or stand for extended periods of time
• Travel is not typically required

Compensation Range:

$113,000.00 - $197,700.00

CareSource takes into consideration a combination of a candidate’s education, training, and experience as well as the position’s scope and complexity, the discretion and latitude required for the role, and other external and internal data when establishing a salary level. In addition to base compensation, you may qualify for a bonus tied to company and individual performance. We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package.

Compensation Type (hourly/salary):

Salary

Organization Level Competencies

• Fostering a Collaborative Workplace Culture
• Cultivate Partnerships
• Develop Self and Others
• Drive Execution
• Influence Others
• Pursue Personal Excellence
• Understand the Business

This job description is not all inclusive. CareSource reserves the right to amend this job description at any time. CareSource is an Equal Opportunity Employer. We are dedicated to fostering an environment of belonging that welcomes and supports individuals of all backgrounds.

#LI-GM1

Brand=CareSource