Senior Security Policy & GRC Analyst (Hybrid | Remote)

WPS—A health solutions company; Minnesota; Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Hybrid work options

Performance bonus

401(k) with match

Health insurance

Dental insurance

Professional development

Paid time off

Telehealth services start DAY 1

Job summary

WPS is seeking a Senior Security Policy Analyst to develop and maintain security policies, standards, and procedures, leveraging ServiceNow to streamline policy management, compliance tracking, and reporting.

This role demands deep cybersecurity knowledge, governance, risk, and compliance experience, plus strong communication and documentation for cross-functional teams, and support for AI governance initiatives.

Qualifications

• Bachelor’s degree in CS/IS/Cybersecurity or related field.
• 5+ years in security policy, governance, risk, and compliance roles.
• Strong knowledge of NIST CSF and AI governance principles; other frameworks (ISO 27001, CIS, SOC 2).
• Cloud security policy knowledge for AWS/Azure/GCP or SaaS apps.
• Experience with ServiceNow IRM workflows.
• Clear, professional security documentation creation.
• Experience delivering security awareness training.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow to streamline policy management, compliance tracking, and reporting.
• Governance, risk management, and compliance activities across the org.
• Conduct risk assessments, control evaluations, and gap analyses mapped to NIST CSF.
• Collaborate with IT, Risk, Compliance, and Business teams for policy adoption.
• Mentor junior analysts and guide policy development and ServiceNow usage.
• Support security awareness and responsible AI initiatives.

Skills

NIST CSF

AI governance

GRC governance

ServiceNow IRM

Policy development

Risk assessments

Security documentation

Security awareness training

Communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security

Tools

ServiceNow IRM

Job description

WPS is seeking a Senior Security Policy Analyst to develop and maintain security policies, standards, and procedures, leveraging ServiceNow to streamline policy management, compliance tracking, and reporting.

This role demands deep cybersecurity knowledge, governance, risk, and compliance experience, plus strong communication and documentation for cross-functional teams, and support for AI governance initiatives.