Senior Information Security GRC Analyst

CareSource; United States; On-site; USD 94,000 - 165,000; Full time

Benefits offered by this job

Bonus potential

Total rewards package

Job summary

CareSource is seeking an Information Security GRC Analyst III to manage daily and long-term information security risks in line with risk policies and limits. The role focuses on risk measurement, mitigation, and governance within the enterprise security program.

The position requires strong collaboration with staff and vendors, experience with SOX and security controls, and a track record in risk reporting and control improvements. A CISSP/CRISC/SSCP is preferred.

Qualifications

• Bachelor degree or equivalent work experience required.
• Minimum seven years of relevant work experience required.
• CRISC or SSCP preferred; CISSP preferred.

Responsibilities

• Measure, monitor, and report on information security risks.
• Review and report on vendor/third party risk to support vendor risk management activities.
• Engage staff/vendors to develop information security risk mitigation plans.
• Monitor and report on risk mitigation plans to ensure timely execution.
• Engage employees in management of information security risk and ensure accountability.

Skills

IT Audit

Security Monitoring

Data Encryption

Access Management/Authentication

Network Security

SOX Compliance

Project Management

Education

Bachelor Degree in a relevant field

7+ years of relevant experience

Tools

Microsoft Office

Job description

CareSource is seeking an Information Security GRC Analyst III to manage daily and long-term information security risks in line with risk policies and limits. The role focuses on risk measurement, mitigation, and governance within the enterprise security program.

The position requires strong collaboration with staff and vendors, experience with SOX and security controls, and a track record in risk reporting and control improvements. A CISSP/CRISC/SSCP is preferred.