Security GRC Analyst: Risk & Compliance

Jefferson Health; Fort Washington (Montgomery County); On-site; USD 90,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Retirement plans

Job summary

Thomas Jefferson University is seeking a security and resilience specialist to help manage information security and regulatory compliance across the organization. You will apply policies, conduct risk assessments, and promote awareness to protect assets and ensure resilience.

The role emphasizes data-driven risk measurement, collaboration across units, and ongoing improvements to governance and controls in a complex healthcare environment.

Qualifications

• Bachelor’s degree in a science, technology, engineering, or math discipline or
• High School Diploma/GED and preferred certifications.
• 3 years related work experience

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

Regulatory compliance

Risk management

Security data engineering

Organizational resilience

Education

Bachelor’s Degree in STEM

High School Diploma/GED with certs

Job description

Thomas Jefferson University is seeking a security and resilience specialist to help manage information security and regulatory compliance across the organization. You will apply policies, conduct risk assessments, and promote awareness to protect assets and ensure resilience.

The role emphasizes data-driven risk measurement, collaboration across units, and ongoing improvements to governance and controls in a complex healthcare environment.