Senior Security Policy Analyst - GRC & Compliance

BJC HealthCare; Missouri; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits

401(k) plan with match

Tuition assistance

Job summary

BJC HealthCare is seeking a Senior Security Policy Analyst to maintain security policies and update applications in the GRC system. The role emphasizes strong writing skills, compliance knowledge, and meticulous attention to detail to safeguard information resources across the organization.

The position involves coordinating with Compliance and Legal, aligning policies with NIST CSF, NIST 800-53, HIPAA, HITECH, and PCI DSS, and guiding IT teams through policy revisions to enhance the

Qualifications

• Bachelor's degree required.
• 2-5 years of experience in security policy or governance.
• Experience with NIST CSF, NIST 800-53, HIPAA, HITECH, PCI DSS preferred.

Responsibilities

• Present policy changes to IT leadership and committees, administer the policy management solution and Governance, Risk and Compliance tool.
• Identify gaps and redundancies in the current policy structure and implement changes.
• Ensure mapping to NIST CSF, NIST 800-53, HIPAA, HITECH, PCI DSS for regulatory compliance.
• Lead project revisions to align policies with clinical and business objectives, risk management, and regulatory requirements.
• Collaborate with Compliance and Legal to incorporate policy provisions and advise IT security teams.

Skills

Excellent writing

Compliance knowledge

Attention to detail

Education

Bachelor's Degree

Tools

GRC system

Policy management tool

Job description

BJC HealthCare is seeking a Senior Security Policy Analyst to maintain security policies and update applications in the GRC system. The role emphasizes strong writing skills, compliance knowledge, and meticulous attention to detail to safeguard information resources across the organization.

The position involves coordinating with Compliance and Legal, aligning policies with NIST CSF, NIST 800-53, HIPAA, HITECH, and PCI DSS, and guiding IT teams through policy revisions to enhance the