Senior IT Security & GRC Analyst — Onsite Santa Fe

Cybersecurity Jobs; Santa Fe (NM); On-site; USD 50,000 - 74,000; Full time

Job summary

New Mexico Health Care Authority (HCA) in Santa Fe, NM is seeking a Senior IT Security Analyst to support governance, risk, and compliance activities onsite. You will lead IT audits, develop security policies, and coordinate with staff, vendors, and regulators to ensure compliance with federal and state requirements.

The role emphasizes risk analysis, documentation, training, and continuous improvement of the GRC posture for HCA and other state agencies.

Qualifications

• Bachelor’s degree in Computer Science, MIS, IT, Engineering or similar, plus 3 years in IT security or compliance validation.
• Certification in IT security/compliance (e.g., CISSP, CEH, CCSP, HCISPP, SSCP) can substitute 1 year of experience.
• Valid Driver’s License and Defensive Driving Certificate required.
• Background check completed pre-employment.

Responsibilities

• Lead IT audits, including drafting and submitting audit documents.
• Develop security governance policies and standards for review by CISO/CIO.
• Coordinate with staff, vendors, and auditors to ensure federal/state IT security compliance.
• Support risk analysis and remediation with documentation of controls.
• Maintain and update security risk documentation and remediation actions.
• Provide security awareness training to support ongoing compliance.

Skills

Audit readiness

GRC governance

Security policy development

Risk analysis

Documentation

Security training

Education

Bachelor’s degree in Computer Science / MIS / IT / Engineering

Job description

New Mexico Health Care Authority (HCA) in Santa Fe, NM is seeking a Senior IT Security Analyst to support governance, risk, and compliance activities onsite. You will lead IT audits, develop security policies, and coordinate with staff, vendors, and regulators to ensure compliance with federal and state requirements.

The role emphasizes risk analysis, documentation, training, and continuous improvement of the GRC posture for HCA and other state agencies.