Senior IT Security Analyst: GRC & Vendor Risk Lead

Capital Health; New Jersey; On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical Plan

Dental Plan

Vision Plan

Retirement Savings Plan

Paid Time-Off

Job summary

Capital Health IT is seeking an IT Security Analyst II to own and manage core information security programs, including TPRM, awareness training, and application security assessments. You will mentor staff, develop security policies, and report on security metrics to leadership.

The role requires 3+ years in cybersecurity/GRC, knowledge of NIST CSF and HIPAA, and CompTIA Security+. A proactive, risk-based approach is essential in a dynamic healthcare environment.

Qualifications

• Bachelor's degree or equivalent experience required.
• 3 years in cybersecurity, GRC, or related roles, with progressive responsibility.
• CompTIA Security+ and knowledge of HIPAA/NIST CSF required; ISACA/CISSP a plus.

Responsibilities

• Owns end-to-end TPRM program including risk scoring and assessments.
• Lead vendor risk assessments from outreach to closure.
• Administers phishing simulation program and reports metrics.
• Performs Application Security Assessments and risk-based recommendations.
• Maintains information security policies, training content, and remediation tracking.

Skills

Vendor risk management

Phishing simulations

Application security

GRC

Regulatory knowledge

Education

Bachelor's degree

Tools

Vulnerability scanners

Policy management tools

Threat intelligence

Job description

Capital Health IT is seeking an IT Security Analyst II to own and manage core information security programs, including TPRM, awareness training, and application security assessments. You will mentor staff, develop security policies, and report on security metrics to leadership.

The role requires 3+ years in cybersecurity/GRC, knowledge of NIST CSF and HIPAA, and CompTIA Security+. A proactive, risk-based approach is essential in a dynamic healthcare environment.