Security GRC Analyst II — Governance, Risk & Compliance

Saint Luke's; Kansas City (MO); On-site; USD 85,000 - 115,000; Full time

Job summary

Saint Luke's in Kansas City, MO seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet security controls and perform vulnerability analyses and risk assessments.

Responsibilities include leading security reviews, training, mentoring junior staff, identifying gaps, and coordinating remediation with stakeholders while aligning with industry standards.

Qualifications

• Equivalent experience can be used in lieu of degree.
• Leads internal security reviews, audits, and control evaluations.
• Prepares security awareness training and phishing campaigns.

Responsibilities

• Leads internal and external security reviews, audits, and controls evaluations.
• Prepares security awareness training and phishing campaigns to enable a security aware organization
• Provides guidance and training for and mentors junior staff.
• Identify gaps in security design or controls and implement remediation or mitigating controls.
• Supports development and reporting of security metrics.
• Performs vendor information security assessments.
• Ensure alignment of information security controls with industry standards.
• Perform ongoing monitoring of third-party vendors.
• Collaborate with stakeholders to understand deficiencies and gaps.

Skills

Security governance

Risk assessment

Vulnerability analysis

Security audits

Security training

Mentoring

Vendor assessments

Security metrics

Industry standards

Education

Equivalent experience in lieu of degree

Tools

NIST CSF

ISO 27001

Job description

Saint Luke's in Kansas City, MO seeks an Information Security Governance, Risk & Compliance Analyst II to ensure IT processes meet security controls and perform vulnerability analyses and risk assessments.

Responsibilities include leading security reviews, training, mentoring junior staff, identifying gaps, and coordinating remediation with stakeholders while aligning with industry standards.