Lead Information Risk Analyst

Centene Corporation•St. David's, MO

3d•$107,700 - $199,300•Hybrid

About The Position

The Security Compliance Lead Information Risk Analyst is a senior individual contributor role with enterprise-wide responsibility for security governance, compliance execution, audit readiness, and GRC platform leadership. The role operates independently, leads complex cross functional initiatives, and serves as a subject matter authority, without formal people management responsibilities. This role leads within multiple enterprise compliance domains simultaneously (policy governance, control frameworks, audits, GRC platforms) and leads cross-functional initiatives impacting Information Security, Privacy, IT, Audit, and Governance. The work has enterprise-wide risk and regulatory impact, including audit readiness and certification outcomes. This role is accountable for end-to-end delivery of complex compliance efforts, not just task execution. The Lead Information Risk Analyst independently analyzes and interprets regulatory requirements and control frameworks to inform risk and compliance considerations. They provide expert input on compliance approaches, control alignment options, and documentation practices, influencing program direction and outcomes. This role acts as a subject-matter escalation point for complex compliance, risk, and audit issues, advising stakeholders on risks and trade-offs. They deliver well-reasoned recommendations that guide governance discussions and support executive decision-making. As a non-people manager, this role provides functional leadership to analysts and contributors through guidance, peer review, and quality oversight. They drive governance forums, SME reviews, and steering committee execution. This role influences senior stakeholders through expertise rather than positional authority and mentors others informally but does not conduct performance management. The Lead Information Risk Analyst handles ill-defined, ambiguous problems where standards or controls do not yet exist. They interpret new frameworks (e.g., ARC, AMPE) and translate them into actionable enterprise controls. They balance competing regulatory, technical, and operational constraints and manage sustained workload over standard capacity with frequent context switching. There is regular interaction with senior leaders, auditors, and governance bodies. This role acts as a trusted advisor on compliance posture and risk interpretation and represents the compliance function in cross-program initiatives and audits. Performs other duties as assigned and complies with all policies and standards.

Requirements

Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience
6+ years of combined auditing and IT controls design experience
Knowledge of IT systems and processes
Experience evaluating internal technical control systems required

Nice To Haves

CISA, CISSP, or PMP preferred

Responsibilities

Security governance
Compliance execution
Audit readiness
GRC platform leadership
Leads within multiple enterprise compliance domains simultaneously (policy governance, control frameworks, audits, GRC platforms)
Leads cross-functional initiatives impacting Information Security, Privacy, IT, Audit, and Governance
Accountable for end-to-end delivery of complex compliance efforts
Independently analyzes and interprets regulatory requirements and control frameworks
Provides expert input on compliance approaches, control alignment options, and documentation practices
Acts as a subject-matter escalation point for complex compliance, risk, and audit issues
Delivers well-reasoned recommendations that guide governance discussions and support executive decision-making
Provides functional leadership to analysts and contributors through guidance, peer review, and quality oversight
Drives governance forums, SME reviews, and steering committee execution
Influences senior stakeholders through expertise rather than positional authority
Handles ill-defined, ambiguous problems where standards or controls do not yet exist
Interprets new frameworks (e.g., ARC, AMPE) and translates them into actionable enterprise controls
Balances competing regulatory, technical, and operational constraints
Manages sustained workload over standard capacity with frequent context switching
Regular interaction with senior leaders, auditors, and governance bodies
Represents compliance function in cross-program initiatives and audits
Performs other duties as assigned
Complies with all policies and standards