Senior Security Policy & GRC Analyst

WPS—A health solutions company; Iowa (LA); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Hybrid work options

Performance bonus

401(k) match

Paid time off

Health and dental insurance

Telehealth services

Professional development

Job summary

WPS, a health solutions company, seeks a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures while leveraging ServiceNow to streamline policy management, compliance tracking, and reporting.

The role combines deep knowledge of cybersecurity frameworks with hands-on GRC operations and excels at clear communication and high-quality documentation, supporting security awareness and responsible AI initiatives.

Qualifications

• U.S. citizenship required due to Department of Defense restrictions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security or related field or equivalent combination of education and experience.
• 5 or more years of experience in security policy, governance, risk, and compliance roles.
• Strong working knowledge of NIST CSF and AI governance principles, as well as other cybersecurity frameworks such as ISO 27001, CIS, or SOC 2.
• Strong knowledge and understanding of cloud security policies, configuration standards, and best practices for AWS, Azure, GCP, or SaaS applications in order to apply governance.
• Demonstrated experience with ServiceNow IRM modules, including policy, risk, audit, and compliance workflows.
• Ability to create clear, professional, and actionable security and risk governance documentation.
• Experience developing and delivering security awareness training programs.

Responsibilities

• Develop, review, and maintain corporate security policies, standards, procedures, and guidelines in alignment with NIST CSF, regulatory requirements, and industry best practices.
• Integrate and manage security policies, controls, and risk assessments within ServiceNow IRM and Managed Documents.
• Conduct risk assessments, control evaluations, and gap analyses mapped to NIST CSF to support audit readiness and compliance initiatives.
• Collaborate with IT, Risk, Compliance, and Business teams to ensure policy adoption and awareness across the organization.
• Create reports and analytics on policy adherence, exceptions, and trends using ServiceNow dashboards and workflows.
• Mentor junior analysts and provide guidance on policy development, implementation, and ServiceNow utilization.
• Develop security awareness training programs to educate employees on corporate security policies, procedures, and best practices.

Skills

NIST CSF

AI governance

GRC governance

Policy development

Security awareness

Communication skills

ServiceNow

Education

Bachelor's degree in CS/InfoSec

Tools

ServiceNow IRM

ServiceNow dashboards

Job description

WPS, a health solutions company, seeks a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures while leveraging ServiceNow to streamline policy management, compliance tracking, and reporting.

The role combines deep knowledge of cybersecurity frameworks with hands-on GRC operations and excels at clear communication and high-quality documentation, supporting security awareness and responsible AI initiatives.