Senior Security Policy Analyst — GRC & ServiceNow IRM

Wis Phys Svc Ins Corp; Madison (WI); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Hybrid work flexibility

Performance bonus

401(k) matching

Health and dental insurance

Telehealth

Professional development programs

Job summary

WPS Health Solutions in Madison, WI, is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies, leveraging ServiceNow IRM to streamline governance, risk, compliance, and reporting. The role requires strong communication and documentation skills and supports responsible AI initiatives.

The position emphasizes policy governance, risk assessments mapped to NIST CSF, and collaboration across IT, Risk, and Compliance teams in a hybrid work setup near Madison,

Qualifications

• U.S. citizenship is required for this position due to Department of Defense restrictions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field or equivalent combination of education and experience.
• 5+ years of experience in security policy, governance, risk, and compliance roles.
• Strong knowledge of NIST CSF and AI governance principles, ISO 27001, CIS, SOC 2.
• Strong knowledge of cloud security policies for AWS, Azure, GCP, or SaaS applications.
• Experience with ServiceNow IRM modules (policy, risk, audit, compliance).
• Ability to create clear, professional, actionable security governance documentation.
• Experience developing and delivering security awareness training programs.
• Excellent communication skills for technical and non‑technical stakeholders.
• Experience developing and implementing security policies in regulated environments.
• Strong analytical, organizational, and project management skills.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow to streamline policy management, compliance tracking, and reporting.
• Support governance, risk, and compliance (GRC) operations.
• Mentor junior analysts and provide guidance on policy development and ServiceNow use.
• Develop and deliver security awareness training programs and responsible AI initiatives.
• Produce clear, concise security documentation and policy reports.
• Monitor policy adherence and drive remediation efforts in collaboration with IT, Risk, and Compliance.

Skills

Policy development

Governance & GRC

Communication

Documentation

Risk assessment

Project management

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field

Tools

ServiceNow IRM

Job description

WPS Health Solutions in Madison, WI, is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies, leveraging ServiceNow IRM to streamline governance, risk, compliance, and reporting. The role requires strong communication and documentation skills and supports responsible AI initiatives.

The position emphasizes policy governance, risk assessments mapped to NIST CSF, and collaboration across IT, Risk, and Compliance teams in a hybrid work setup near Madison,