Senior Security Policy & GRC Analyst

WPS Health Solutions; Minneapolis (MN); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Remote/hybrid work options

Performance bonus

401(k) match

Paid time off

Health/dental/telehealth

Professional development

Job summary

WPS Health Solutions is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies and procedures. You will use ServiceNow IRM to streamline policy management, compliance tracking, and reporting, while applying NIST CSF and AI governance principles.

You will mentor junior analysts, produce clear security documentation, and collaborate with IT, Risk, and Compliance teams to ensure policy adoption and regulatory alignment.

Qualifications

• Bachelor’s degree in a relevant field or equivalent combo of education and experience.
• 5+ years in security policy, governance, risk, and compliance roles.
• Strong knowledge of NIST CSF and AI governance, plus ISO 27001 / CIS / SOC 2 basics.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow IRM for policy, risk, audit, and compliance workflows.
• Conduct risk assessments, gap analyses, and assessments mapped to NIST CSF.
• Collaborate with IT, Risk, Compliance, and Business teams to drive policy adoption.
• Create clear, professional security documentation and reports.

Skills

Security policy & governance

Communication & stakeholders

Policy development & training

Risk assessment & gap analysis

Education

Bachelor's degree in Computer Science / Information Security or related field

Tools

ServiceNow IRM

NIST CSF

AI governance familiarity

Job description

WPS Health Solutions is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies and procedures. You will use ServiceNow IRM to streamline policy management, compliance tracking, and reporting, while applying NIST CSF and AI governance principles.

You will mentor junior analysts, produce clear security documentation, and collaborate with IT, Risk, and Compliance teams to ensure policy adoption and regulatory alignment.