Senior Security Policy & GRC Analyst – ServiceNow

WPS Health Solutions; Des Moines (IA); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Remote-hybrid options

Bonus eligibility

401(k) match

Paid time off

Healthcare from day 1

Job summary

WPS Health Solutions seeks a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures. You will leverage ServiceNow for policy management, compliance tracking, and reporting, while guiding junior analysts and advancing AI governance initiatives.

The role requires 5+ years in security policy, governance, risk, and compliance, with strong NIST CSF knowledge and experience in cloud and SaaS governance.

Qualifications

• Develop, review and maintain corporate security policies and standards aligned with NIST CSF and regulatory requirements.
• Create clear, professional security and risk governance documentation.
• Lead policy implementation and monitoring across IT, Risk, Compliance, and Business teams.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow to streamline policy management, compliance tracking, and reporting.
• Mentor junior analysts and provide guidance on policy development and ServiceNow usage.
• Deliver security awareness training and support responsible AI governance initiatives.
• Monitor policy adherence and drive remediation for regulatory gaps.

Skills

GRC governance

ServiceNow IRM

NIST CSF

Policy development

Risk assessment

Security awareness training

Communication skills

Documentation

AI governance

Education

Bachelor's degree in CS/IS/Cybersecurity or related field

Tools

ServiceNow IRM

KnowBe4

Job description

WPS Health Solutions seeks a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures. You will leverage ServiceNow for policy management, compliance tracking, and reporting, while guiding junior analysts and advancing AI governance initiatives.

The role requires 5+ years in security policy, governance, risk, and compliance, with strong NIST CSF knowledge and experience in cloud and SaaS governance.