IT Security Analyst II — GRC, TPRM & Phishing Lead

Capital Health System, Inc.; Lawrenceville (GA); On-site; USD 108,000 - 141,000; Full time

Benefits offered by this job

Medical Plan

Dental Plan

Vision Plan

Paid Time Off

FSA

Job summary

Capital Health seeks an IT Security Analyst II to own and manage core information security programs, including TPRM, phishing awareness training and application security assessments. This role guides policy development, metrics reporting and risk remediation across the organization, mentoring junior staff and collaborating with the IT Manager.

The candidate will demonstrate strong ability to translate technical risks into business terms, oversee vendor risk, and drive security improvements while

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• Three years cybersecurity experience including GRC, vulnerability management or TPRM; knowledge of NIST CSF, HIPAA or similar frameworks; CompTIA Security+ required.

Responsibilities

• Owns the end-to-end third-party risk management (TPRM) program including risk scoring, intake workflows, assessments and reassessments.
• Drives vendor risk assessments from outreach to closure and escalates high-risk relations to leadership.
• Administers phishing simulation program; designs campaigns, schedules, executes and reports trends to leadership.
• Performs Application Security Assessments and provides risk-based recommendations.
• Manages software request/review process for security risk prior to approval and onboarding.
• Supports overall GRC strategy with the IT Manager; contributes to phishing roadmaps and capacity planning.
• Drafts and maintains information security policies, standards and procedures; reports remediation progress for HIPAA/NIST gaps.
• Develops security awareness training content for staff and management; stays current with threats and controls.

Skills

Vendor risk management

GRC

NIST CSF

HIPAA

CompTIA Security+

Risk assessment

Stakeholder communication

Security policy drafting

Education

Bachelor's degree

Job description

Capital Health seeks an IT Security Analyst II to own and manage core information security programs, including TPRM, phishing awareness training and application security assessments. This role guides policy development, metrics reporting and risk remediation across the organization, mentoring junior staff and collaborating with the IT Manager.

The candidate will demonstrate strong ability to translate technical risks into business terms, oversee vendor risk, and drive security improvements while