Senior GRC & Security Risk Analyst

Thomas Jefferson University; Orlando (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life and AD&D insurance

Disability insurance

Tuition assistance

Flexible spending accounts

Retirement plans

Job summary

Thomas Jefferson University seeks an information security leader to manage resilience and regulatory risk across domains such as risk management, security data engineering, and organizational resilience. The role develops and enforces information security policies, performs advanced risk assessments, and ensures alignment with regulatory requirements using data-driven decision making to protect assets.

The position also builds and governs policies, dashboards, and training campaigns, guiding

Qualifications

• Bachelor’s degree or higher in a STEM field with 5 years of relevant work experience.
• Strong knowledge of information security governance, risk management, and compliance.
• Experience implementing enterprise policies and training on security awareness.

Responsibilities

• Support a GRC program with policies, standards, and procedures.
• Conduct risk assessments including third party and cloud system reviews.
• Develop executive dashboards to track risk and compliance metrics.
• Collaborate with cross-functional teams to embed security in operations.
• Mentor GRC analysts and drive security awareness campaigns.

Skills

Information security

GRC expertise

Regulatory compliance

Risk assessments

Education

Bachelor’s Degree in a science, technology, engineering, or math

Job description

Thomas Jefferson University seeks an information security leader to manage resilience and regulatory risk across domains such as risk management, security data engineering, and organizational resilience. The role develops and enforces information security policies, performs advanced risk assessments, and ensures alignment with regulatory requirements using data-driven decision making to protect assets.

The position also builds and governs policies, dashboards, and training campaigns, guiding