Senior Analyst, GRC

Thomas Jefferson University • Montgomery County, PA

1d • Onsite

About The Position

Responsible for effective management of information security and resilience risks through domain expertise in areas such as regulatory compliance, risk management, security data engineering, or organizational resilience. This position develops and enforces information security policies, performs advanced risk assessments, and ensures alignment with regulatory requirements. Uses data driven decision making to protect assets by identifying vulnerabilities, measuring risks, improving resilience, and promoting compliance through security awareness.

Requirements

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 5 years related work experience

Nice To Haves

• preferred certifications

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Develop and enforce enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform senior leadership on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by conducting enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with cross-functional teams to integrate information security best practices and regulatory requirements into operational policies and procedures both within and beyond the immediate job area.
• Mentor and coach GRC analysts, fostering operational excellence and professional growth within the GRC organization.
• Develop executive dashboards and data pipelines to measure and communicate risk trends, compliance metrics, and strategic security objectives to senior stakeholders.

Benefits

• medical (including prescription)
• supplemental insurance
• dental
• vision
• life and AD&D insurance
• short- and long-term disability
• flexible spending accounts
• retirement plans
• tuition assistance
• voluntary benefits
• tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service

What This Job Offers

• Job Type: Full-time
• Career Level: Senior