Senior Security Policy & GRC Lead (ServiceNow IRM)

WPS—A health solutions company; Madison (WI); Hybrid; USD 90,000 - 115,000; Full time

Benefits offered by this job

Performance bonus

401(k) match

Health insurance

Paid time off

Job summary

WPS, a health solutions company, is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures. You will leverage ServiceNow to streamline policy management, compliance tracking, and reporting.

The role combines deep knowledge of cybersecurity frameworks with governance, risk, and compliance (GRC) operations. You will conduct risk assessments mapped to NIST CSF, support AI governance initiatives, mentor junior analysts, and help

Qualifications

• U.S. citizenship is required due to DoD restrictions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field or equivalent experience.
• 5+ years in security policy, governance, risk, and compliance roles.
• Strong knowledge of NIST CSF and AI governance concepts.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Leverage ServiceNow IRM to manage policy, risk, and compliance workflows.
• Conduct risk assessments, control evaluations, and gap analyses mapped to NIST CSF.
• Collaborate with IT, Risk, Compliance, and Business teams to drive policy adoption and awareness.
• Mentor junior analysts and support security awareness initiatives.

Skills

Security governance

Risk assessment

Policy development

ServiceNow IRM

NIST CSF

AI governance

Communication skills

Regulatory compliance

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

ServiceNow

KnowBe4

AWS

Azure

GCP

Job description

WPS, a health solutions company, is seeking a Senior Security Policy Analyst to develop, implement, and maintain security policies, standards, and procedures. You will leverage ServiceNow to streamline policy management, compliance tracking, and reporting.

The role combines deep knowledge of cybersecurity frameworks with governance, risk, and compliance (GRC) operations. You will conduct risk assessments mapped to NIST CSF, support AI governance initiatives, mentor junior analysts, and help