Senior IT Security & GRC Analyst

Capital Health; Lawrenceville, Northern (GA, KY); Hybrid; USD 108,000 - 141,000; Full time

Benefits offered by this job

Medical Plan

Dental Plan

Vision Plan

Retirement Savings Plan

Paid Time Off

Job summary

Capital Health is seeking an IT Security Analyst II to independently own and manage core security programs, including TPRM, phishing simulations, and application security assessments. You will develop and maintain security policies and metrics, mentor junior staff, and collaborate with IT leadership in a fast-paced GRC team.

The role requires a Bachelor’s degree, 3+ years in cybersecurity or related areas, and a Security+ certification, with opportunities for advanced certifications as you

Qualifications

• Bachelors or equivalent in a relevant field.
• 3 years in cybersecurity, GRC, vulnerability management or related roles.
• CompTIA Security+ required.
• Knowledge of NIST CSF, HIPAA or similar frameworks.
• Progress toward ISACA/ISC2 certifications is a plus.

Responsibilities

• Own end-to-end third-party risk management program and workflows.
• Lead vendor risk assessments from outreach to closure.
• Administer phishing simulation program and report trends.
• Perform application security assessments on software.
• Mentor IT Security Analyst I and provide guidance.

Skills

TPRM

Security Awareness

Policy Development

Risk Assessments

Mentoring

Communication

Regulatory Knowledge

Education

Bachelor's degree

Tools

Phishing Simulation Tools

Vulnerability Scanning

Vendor Risk Platforms

Job description

Capital Health is seeking an IT Security Analyst II to independently own and manage core security programs, including TPRM, phishing simulations, and application security assessments. You will develop and maintain security policies and metrics, mentor junior staff, and collaborate with IT leadership in a fast-paced GRC team.

The role requires a Bachelor’s degree, 3+ years in cybersecurity or related areas, and a Security+ certification, with opportunities for advanced certifications as you