Associate Analyst Governance Risk and Compliance

Jefferson Health Plans • 1100 Virginia Drive, PA

1d • Onsite

About The Position

Responsible for ensuring that the organization adheres to regulatory information security requirements, manages information security risks effectively, and implements robust compliance frameworks. Develops and enforces information security policies, conducts risk assessments, and ensures alignment with legal and regulatory standards. Safeguards organizational assets by identifying vulnerabilities, mitigating and quantifying risks, advancing downtime resilience, and fostering a culture of compliance through security awareness.

Requirements

• Bachelor’s Degree in related field
• Less than 1 year related work experience

Responsibilities

• Assist in the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems. Gather data to inform the team on security posture, resilience gaps, and emerging threats.
• Assist in the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.
• Participate in training and learning opportunities to develop skills and stay current with information security best practices

Benefits

• medical (including prescription)
• supplemental insurance
• dental
• vision
• life and AD&D insurance
• short- and long-term disability
• flexible spending accounts
• retirement plans
• tuition assistance
• voluntary benefits
• tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level