Senior InfoSec GRC Analyst – Risk & Compliance

CareSource; Dayton (OH); On-site; USD 94,000 - 165,000; Full time

Job summary

CareSource is seeking an Information Security GRC Analyst III to manage day-to-day and strategic information security risks, ensuring activities stay within risk tolerance and align with approved policies. The role involves monitoring risks, coordinating with staff and vendors on mitigation plans, and collaborating with Enterprise Risk Management to align policies with corporate guidance.

Requires a Bachelor’s degree and seven years of experience; SOX compliance and CISSP/CRISC preferences are

Qualifications

• Bachelor degree or equivalent years of relevant work experience.
• Minimum of seven years of relevant work experience.

Responsibilities

• Measure, monitor, and report on information security risks.
• Review vendor/third party risk to support vendor risk management activities.
• Engage staff and/or vendors to develop information security risk mitigation plans to address risks identified in Vendor risk reviews.
• Monitor and report on information security risk mitigation plans to ensure timely execution.
• Engage employees in the management of information security risk and ensure they are aware of their accountabilities with regard to information security risk management.
• Regularly assess and report to management any exceptions to information risk management policies, procedures and limits.
• Engage with the Enterprise Risk Management office to ensure information risk management policies, procedures and limits are aligned with Enterprise Risk Management policies and guidance.
• Contribute and provide input to the development of operational department goals.
• Acts as technical expert in functional domain.
• Recommends technical advancements to improve CareSource customer and partner experiences.
• Perform any other job related instructions as requested.

Skills

Risk management

Vendor risk

SOX compliance

Communication skills

Project management

Incident response

Security monitoring

Policy & procedures

Education

Bachelor Degree or equivalent years of relevant work experience

Tools

IT Audit Tools

Server security

Network security

Windows OS

Access Management

Job description

CareSource is seeking an Information Security GRC Analyst III to manage day-to-day and strategic information security risks, ensuring activities stay within risk tolerance and align with approved policies. The role involves monitoring risks, coordinating with staff and vendors on mitigation plans, and collaborating with Enterprise Risk Management to align policies with corporate guidance.

Requires a Bachelor’s degree and seven years of experience; SOX compliance and CISSP/CRISC preferences are