InfoSec GRC Analyst II: Risk, Compliance & Controls

Saint Luke's Health System; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Saint Luke's Health System seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet defined security controls, conduct vulnerability analyses, and assess risk. You will lead remediation activities and mentor junior staff in a security-aware organization.

Ideal candidates have 3–5 years of applicable experience and a Bachelor’s Degree (or equivalent). This is a full-time role based in the United States within a healthcare setting.

Qualifications

• 3–5 years of applicable experience in information security.
• Bachelor’s Degree or equivalent experience.

Responsibilities

• Lead internal and external security reviews, audits, and controls evaluations.
• Prepare security awareness training and phishing campaigns to enable a security aware organization.
• Provide guidance and training for and mentor junior staff.
• Identify gaps in security design or controls and implement remediation or mitigating controls.
• Support development and reporting on security metrics.
• Perform vendor information security assessments.
• Ensure alignment of information security controls and processes with industry standards.
• Lead IT risk assessment projects.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with key stakeholders to gain a common understanding of deficiencies/gaps.
• Analyze compliance requirements.

Skills

Security governance

Risk assessment

Security awareness

Mentoring

Education

Bachelor’s Degree

Job description

Saint Luke's Health System seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet defined security controls, conduct vulnerability analyses, and assess risk. You will lead remediation activities and mentor junior staff in a security-aware organization.

Ideal candidates have 3–5 years of applicable experience and a Bachelor’s Degree (or equivalent). This is a full-time role based in the United States within a healthcare setting.