Senior IT Security Analyst

Wis Phys Svc Ins Corp; Madison (WI); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Hybrid work flexibility

Performance bonus

401(k) matching

Health and dental insurance

Telehealth

Professional development programs

Job summary

WPS Health Solutions in Madison, WI, is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies, leveraging ServiceNow IRM to streamline governance, risk, compliance, and reporting. The role requires strong communication and documentation skills and supports responsible AI initiatives.

The position emphasizes policy governance, risk assessments mapped to NIST CSF, and collaboration across IT, Risk, and Compliance teams in a hybrid work setup near Madison,

Qualifications

• U.S. citizenship is required for this position due to Department of Defense restrictions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field or equivalent combination of education and experience.
• 5+ years of experience in security policy, governance, risk, and compliance roles.
• Strong knowledge of NIST CSF and AI governance principles, ISO 27001, CIS, SOC 2.
• Strong knowledge of cloud security policies for AWS, Azure, GCP, or SaaS applications.
• Experience with ServiceNow IRM modules (policy, risk, audit, compliance).
• Ability to create clear, professional, actionable security governance documentation.
• Experience developing and delivering security awareness training programs.
• Excellent communication skills for technical and non‑technical stakeholders.
• Experience developing and implementing security policies in regulated environments.
• Strong analytical, organizational, and project management skills.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow to streamline policy management, compliance tracking, and reporting.
• Support governance, risk, and compliance (GRC) operations.
• Mentor junior analysts and provide guidance on policy development and ServiceNow use.
• Develop and deliver security awareness training programs and responsible AI initiatives.
• Produce clear, concise security documentation and policy reports.
• Monitor policy adherence and drive remediation efforts in collaboration with IT, Risk, and Compliance.

Skills

Policy development

Governance & GRC

Communication

Documentation

Risk assessment

Project management

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field

Tools

ServiceNow IRM

Job description

U.S. citizenship is required for this position due to Department of Defense restrictions.

Our Senior Security Policy Analyst is responsible for developing, implementing, and maintaining security policies, standards, and procedures while leveraging ServiceNow to streamline policy management, compliance tracking, and reporting. This Senior Analyst combines deep knowledge of cybersecurity frameworks with hands‑on experience in governance, risk, and compliance (GRC) operations, and excels at clear communication and high-quality documentation, and actively supports security awareness and responsible AI initiatives. Salary Range
$90,000 ~ $115,000
Work Location
Our first consideration will be to have this employee be able to take advantage of Hybrid work and collaboration, living within the state of Wisconsin. Employees within 45 miles of WPS Headquarters (1717 W. Broadway in Madison, WI, 53713) will be expected to be able to work in office 3 days a week on a regular basis. Secondary consideration will be given to remote candidates in Wisconsin, Illinois, Michigan, Minnesota, and Iowa. If not regionally local, frequent monthly travel to our WPS Headquarters will be likely.

How do I know this opportunity is right for me? If you:

• Enjoy Developing, reviewing, and maintaining corporate security policies, standards, procedures, and guidelines in alignment with NIST CSF, regulatory requirements, and industry best practices.
• Would like to be accountable for integration and management of security policies, controls, and risk assessments within ServiceNow IRM and Managed Documents.
• Can conduct risk assessments, control evaluations, and gap analyses mapped to NIST CSF to support audit readiness and compliance initiatives.
• Like to collaborate with IT, Risk, Compliance, and Business teams to ensure policy adoption and awareness across the organization.
• Have created clear, concise, and actionable security documentation, including policies, procedures, guidance, and reports.
• Wan to monitor compliance with internal policies and external regulatory requirements, identifying gaps and driving remediation efforts.
• Like providing reports and analytics on policy adherence, exceptions, and trends using ServiceNow dashboards and workflows.
• Can serve as a subject matter expert on security governance, NIST CSF implementation, and risk management best practices.
• Would enjoy Mentor junior analysts and provide guidance on policy development, implementation, and ServiceNow utilization.
• Have developed security awareness training programs to educate employees on corporate security policies, procedures, and best practices.
• Can support AI governance awareness programs to inform employees about responsible AI use, ethical considerations, and regulatory requirements.
• Like to maintain and update training materials to reflect changes in policies, regulations, or emerging AI and cybersecurity threats.
• Have assessed and monitored third-party vendors to ensure compliance with company security policies and industry regulations.

Minimum Qualifications

• U.S. citizenship is required for this position due to Department of Defense restrictions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field or equivalent combination of education and experience.
• 5 or more years of experience in security policy, governance, risk, and compliance roles.
• Strong working knowledge of NIST CSF and AI governance principles, as well as other cybersecurity frameworks such as ISO 27001, CIS, or SOC 2.
• Strong knowledge and understanding of cloud security policies, configuration standards, and best practices for AWS, Azure, GCP, or SaaS applications in order to apply governance.
• Demonstrated experience with ServiceNow IRM modules, including policy, risk, audit, and compliance workflows.
• Ability to create clear, professional, and actionable security and risk governance documentation.
• Experience developing and delivering security awareness training programs.
• Excellent communication skills, capable of engaging both technical and non-technical stakeholders.
• Demonstrated experience in developing and implementing security policies and standards in a highly regulated environment.
• Strong analytical, organizational, and project management skills, with the ability to drive initiatives independently.

Preferred Qualifications

• Familiarity with knowbe4 or other security awareness platform tools.
• Familiarity using AI to facilitate automated workflows.

Remote Work Requirements

• High speed cable or fiber
• Minimum of 10 Mbps downstream and at least 1 Mbps upstream internet connection (can be checked at https://speedtest.net ).
• Remote and hybrid work options available
• Performance bonus and/or merit increase opportunities
• 401(k) with a 100% match for the first 3% of your salary and a 50% match for the next 2% of your salary (100% vested immediately)
• Competitive paid time off
• Health insurance, dental insurance, and telehealth services start DAY 1
• Professional and Leadership Development Programs

WPS, a health solutions company, is a leading not-for-profit health insurer and federal government contractor headquartered in Madison, Wisconsin. WPS offers health insurance plans for individuals, families, seniors and group health plans for small to large businesses. We process claims and provide customer support for beneficiaries of the Medicare program and manage benefits for millions of active‑dutied and retired military personnel across the U.S. and abroad. WPS has been making healthcare easier for the people we serve for nearly 80 years . Proud to be military and veteran ready.

Culture Drives Our Success

WPS’ culture is where the great work and innovations of our people are seen, fueled and rewarded. We accomplish this by creating an open and empowering employee experience. We recognize the benefits of employee engagement as an investment in our workforce—both current and future—to effectively seek, leverage, and include differing and unique perspectives that fuel agility and innovation on high-performing teams. This results in people bringing their authentic selves to work every day in an organization that successfully adapts to business changes and new opportunities.

Instagram
LinkedIn
Facebook
WPS Health Blog This position may from time to time provide support to federal health care programs and other governmental or regulated industries. In accordance with law and/or contractual requirements, individuals in this role are or may be subject to all applicable federal regulations, agency contract requirements, and WPS internal policies, including but not limited to standards for data security, privacy, confidentiality, and program integrity. WPS and its personnel are subject to mandatory enhanced screening and background investigation prior to being granted access to information systems and/or sensitive data in order to safeguard regulated information and government resources that provide critical services.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.