Senior GRC Analyst: Security & Risk Leader

Jefferson Health; Washington, Northern (Washington County, KY); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Jefferson Health in Montgomery County, PA seeks a Senior Analyst for Governance, Risk, and Compliance to manage information security and resilience risks. You will develop policies, perform advanced risk assessments, and align with regulatory requirements to protect assets and promote compliance.

The role emphasizes data-driven decision making, leadership in GRC initiatives, and collaboration across business units to improve security posture and resilience.

Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline.
• 5 years related work experience.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows.
• Develop and enforce enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments and third party risk assessments.
• Synthesize data to inform senior leadership on security posture, resilience gaps, and emerging threats.
• Develop executive dashboards and data pipelines to measure and communicate risk trends, compliance metrics, and strategic security objectives.

Skills

Regulatory compliance

Risk management

Security data engineering

Organizational resilience

Education

Bachelor’s Degree in STEM

Certifications preferred

Job description

Jefferson Health in Montgomery County, PA seeks a Senior Analyst for Governance, Risk, and Compliance to manage information security and resilience risks. You will develop policies, perform advanced risk assessments, and align with regulatory requirements to protect assets and promote compliance.

The role emphasizes data-driven decision making, leadership in GRC initiatives, and collaboration across business units to improve security posture and resilience.