Senior InfoSec GRC & Risk Analyst

CareSource; United States; Remote; USD 113,000 - 198,000; Full time

Job summary

CareSource is seeking an Information Security GRC Analyst IV to manage day-to-day risk and compliance programs, ensuring activities stay within policy and risk tolerance. The role spans strategic planning, control design, and coordination with auditors and regulators to protect information assets.

The ideal candidate has extensive IT security risk experience, strong communication skills, and a proven ability to lead cross-functional initiatives, with a focus on governance, risk, and compliance.

Qualifications

• Bachelor’s degree is required
• Ten years of IT, IT risk, or security experience required
• Master’s degree is preferred
• Certifications in information security preferred (CISSP/CRISC/CISA/CISM/SSCP)

Responsibilities

• Collaborate with stakeholders to implement information security risk and compliance controls
• Measure, monitor, report cybersecurity risk and security metrics
• Report exceptions to risk management policies to senior management
• Develop risk mitigation plans with staff or vendors
• Maintain evidence of internal IT controls for audits and regulators
• Serve as primary liaison for IT audits with auditors and regulators
• Lead security strategy with department leaders
• Present analyses and validate requirements for strategic initiatives
• Build staff expertise and oversee project work
• Deliver clear, engaging security presentations

Skills

Risk assessment

Stakeholder communication

IT audit & compliance

Security governance

Project management

Vendor management

Auditing

Policy

Education

Bachelor’s degree in IT, CS, or related field

Master’s degree preferred

Certifications CISSP/CRISC/CISA/CISM/SSCP preferred

Job description

CareSource is seeking an Information Security GRC Analyst IV to manage day-to-day risk and compliance programs, ensuring activities stay within policy and risk tolerance. The role spans strategic planning, control design, and coordination with auditors and regulators to protect information assets.

The ideal candidate has extensive IT security risk experience, strong communication skills, and a proven ability to lead cross-functional initiatives, with a focus on governance, risk, and compliance.