Senior InfoSec GRC Analyst – Risk & Compliance

CareSource; Northern (KY); Hybrid; USD 94,000 - 165,000; Full time

Job summary

CareSource Information Security GRC Analyst III position manages day-to-day and long-term information security risks, ensuring compliance with risk policies and limits. Requires a Bachelor's degree or equivalent and at least seven years of relevant experience.

The role emphasizes measuring and reporting risk, vendor risk management, and coordinating with Enterprise Risk Management to align policies. Strong communication and collaboration are essential to drive risk mitigation and improve

Qualifications

• Bachelor's degree or equivalent required.
• Minimum of seven (7) years of relevant work experience required.

Responsibilities

• Measure, monitor, and report on information security risks
• Review and report on vendor/third party risk to support vendor risk management activities
• Engage staff and/or vendors to develop information security risk mitigation plans to address risks identified in Vendor risk reviews
• Monitor and report on information security risk mitigation plans to ensure timely execution
• Engage employees in the management of information security risk and ensure they are aware of their accountabilities with regard to information security risk management
• Regularly assess and report to management any exceptions to information risk management policies, procedures and limits
• Engage with the Enterprise Risk Management office to ensure information risk management policies, procedures and limits are aligned with Enterprise Risk Management policies and guidance
• Contribute and provide input to the development of operational department goals
• Acts as technical expert in functional domain
• Recommends technical advancements to improve CareSource customer and partner experiences
• Perform any other job related instructions as requested

Skills

IT Audit

App Security

Server Security

Network Security

SOX Compliance

MS Office

Access Management

Security Monitoring

Data Encryption

Networking

SSL/IPSec/TCP/IP

Windows OS

Project Management

Education

Bachelor's Degree or equivalent

Job description

CareSource Information Security GRC Analyst III position manages day-to-day and long-term information security risks, ensuring compliance with risk policies and limits. Requires a Bachelor's degree or equivalent and at least seven years of relevant experience.

The role emphasizes measuring and reporting risk, vendor risk management, and coordinating with Enterprise Risk Management to align policies. Strong communication and collaboration are essential to drive risk mitigation and improve