Analyst, Information Security Governance, Risk, and Compliance

Edwards Lifesciences • Irvine, CA

1d

About The Position

At Edwards Lifesciences, we’re dedicated to developing ground-breaking technologies with a genuine impact on patients’ lives. Our investment in cutting-edge information technology supports innovation and collaboration globally, enabling diverse teams to optimize efficiency and success. As part of our IT team, your expertise and commitment will help facilitate our patient-focused mission by developing and enhancing technological solutions. The Information Security GRC Analyst supports stakeholder‑facing risk operations across information security, data, and AI risk domains. This role is responsible for operational execution of risk and governance processes including risk and issues management, control model governance, policy and standards lifecycle support, risk assessments and training and awareness activities. Success in this role requires strong communication skills, attention to detail, and the ability to partner closely with stakeholders, service owners, and leaders to drive timely risk decisions and outcomes. This position plays a key role in stabilizing and scaling existing information security governance processes while enabling expansion into data and AI governance capabilities.

Requirements

• Bachelor's Degree or Equivalent in related STEM field
• A minimum of two years experience of previous related experience or equivalent work experience based on Edwards criteria

Nice To Haves

• Experience in information security, risk management, compliance, or a related governance or operational role
• Experience supporting governance processes related to data governance and responsible AI
• Exposure to risk, issues, audit, or compliance management tools
• Experience leading risk assessments
• Professional certifications such as Security+, GISP, CRISC, GSEC, GISF, or similar
• Experience supporting or implementing requirements aligned to frameworks such as NIST 800‑53 or equivalent
• Working knowledge of NIST‑based security and risk control concepts
• Strong written and verbal communication skills, with the ability to engage non‑technical stakeholders
• Ability to manage competing priorities in a fast‑paced environment
• Collaborative mindset with a customer‑focused approach
• Working knowledge of cybersecurity and information security risk principles

Responsibilities

• Support intake, tracking, and lifecycle management of information security, data, and AI‑related risk issues
• Coordinate stakeholder escalations and follow‑ups to ensure accurate risk documentation, ownership, and remediation tracking
• Assist with issue prioritization and reporting to support leadership decision‑making
• Support control model governance activities, including control documentation maintenance and operational governance processes
• Assist with policy and standards lifecycle activities, including updates, reviews, and stakeholder coordination
• Partner with service owners and subject matter experts to ensure governance artifacts remain accurate and usable
• Support the development, maintenance, and validation of risk, control, and performance metrics
• Partner with stakeholders to ensure reporting reflects current risk posture and supports data‑driven leadership decisions
• Assist in maintaining dashboards and metrics used for operational and executive‑level visibility
• Partner directly with business and IT stakeholders to facilitate risk discussions and resolve governance questions
• Support training and awareness activities related to information security, data governance, and responsible AI use
• Build trusted working relationships through clear communication and reliable execution
• Perform moderately complex analysis related to information security governance and risk management
• Support continuous improvement initiatives across GRC processes and tooling

Benefits

• competitive salaries
• performance-based incentives
• a wide variety of benefits programs to address the diverse individual needs of our employees and their families

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees