IT Governance Risk Compliance Analyst Lead
Franciscan Alliance, Inc.
•$96,732 - $133,006•Remote
About The Position
Healthcare Information Security departments must monitor risk every day. The Lead Governance Risk Compliance Analyst creates audit plans and methodologies, as well as conduct audits and risk assessments. This position requires the ability to analyze audit data, create reports, and track the resolution of negative audit findings.
Requirements
- Associate's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security) or equivalent experience
- 8 years Information security Required
Nice To Haves
- Bachelor's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security)
- Certificate CISSP, SANS GIAC or other industry-recognized or vendor certification
- 5 years Healthcare, audit or GRC Preferred
Responsibilities
- Schedule and conduct internal and external audits and assessments.
- Create audit reports; peer reviews audit reports written by GRC Analysts or other Senior GRC Analysts for accuracy, completeness and other criteria.
- Create audit methodologies and templates used by the GRC Team to conduct audits and assessments.
- Analyze audit data to identify risks and complex relationships between threats, controls and vulnerabilities.
- Formulate prioritized action plans based on audit findings.
- Track the resolution of negative audit findings and helps remediate findings where appropriate.
- Understand how to translate compliance requirements into technology functions and how to translate compliance requirements into business impacts.
- Create and review GRC policies, procedures, and standards.
- Develop and deliver information security training, education and awareness content to Franciscan’s workforce.
- Mentor GRC Analysts and Sr. Analysts.
- Conduct vendor risk assessments, maintain vendor tiering, and review third party contracts for security requirements
- ServiceNow Platform Ownership - Maintain workflows and control monitoring in ServiceNow IRM and provide metrics and reporting over remediation efforts
- Maintain control mappings across NIST CSF 2.0, HITRUST, HIPPA, and other security frameworks
Benefits
- Comprehensive benefit offerings
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Associate degree
