Senior IT Compliance Analyst

Vizient•Chicago, IL

19h

About The Position

In this role, you will serve as a trusted expert in IT Governance, Risk, and Compliance (GRC), with a primary focus on enterprise IT risk management and organizational resiliency. You will directly contribute to Vizient’s security and risk strategy by identifying, assessing, and managing technology and information security risks across the enterprise. This role requires a strong understanding of both legacy systems and emerging technologies to proactively mitigate risk and strengthen Vizient’s overall security posture. The GRC Senior Compliance Analyst partners closely with compliance, security, technology, and business leadership to design, implement, and mature risk management practices. The role supports regulatory and governance obligations under frameworks and regulations such as SOX, HIPAA, and SEC requirements, while maintaining a balanced approach that prioritizes risk reduction and business resilience over compliance alone. Working at Vizient means making a difference in today’s dynamic health care industry, every day. Our mission is to connect health care organizations and providers with the knowledge, solutions and expertise that enable them to accelerate their clinical and operational performance. Vizient is based in Dallas and has offices in 20 metropolitan areas across the United States. We have 4,000 employees with a breadth of expertise, experience and compassion, who are eager to develop and implement solutions that advance health care for the greater good. Across our enterprise of companies, we have the scale and depth to deliver exponential impact across the continuum of care: Provista – Proven supply chain partner specializing in extended, diagnostic and preventive care facilities, including surgery centers, home health and senior living Apexus – The exclusive contractor for 340B Drug Pricing Program, managed by the Health Resources and Services Administration aptitude – The industry’s first online direct contracting market, supporting self-contracting activity between hospitals and suppliers. Sg2 - Providing a unique blend of analytics, intelligence, consulting and education to enable health system leaders to integrate strategic growth and performance across the continuum of care.

Requirements

5–7 years of experience in IT risk management, governance, compliance, or information security.
Strong understanding of IT risk management concepts, governance frameworks, and regulatory requirements, including SOX, HIPAA, and SEC standards.
Experience managing risk registers, facilitating risk discussions, and presenting risk posture to leadership audiences.
Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
Experience using Power Automate, Power BI, or similar tools to create automated workflows and risk dashboards.
Strong analytical, documentation, and problem-solving skills with the ability to translate risk and technical concepts into clear business-focused insights.
Demonstrated ability to work independently and collaboratively to influence risk-based decision-making across technical and non-technical teams.

Nice To Haves

Bachelor’s degree in Information Systems, Computer Science, , or a related field preferred.

Responsibilities

Conduct ongoing, enterprise-wide ongoing IT risk assessments in partnership with compliance, security, and business stakeholders.
Maintain oversight of the IT and AI risk registers, including facilitating monthly risk rating discussions and providing quarterly risk updates to leadership.
Identify strengths and weaknesses in the risk management program related to privacy, security, business resiliency, and compliance frameworks.
Analyze risk assessment findings, document and report program gaps, and recommend risk mitigation strategies to compliance and security leadership.
Establish and operate within the organization’s risk management program, including documenting risk acceptance, tolerance levels, and ongoing reviews with leadership.
Partner with compliance and security leadership to perform ongoing compliance and security assessments and recommend annual strategic technology and risk directives.
Serve as a liaison with internal and external auditors to support risk-related inquiries, control validation, and remediation tracking.
Develop and leverage automation and reporting tools (e.g., Power Automate, Power BI) to streamline risk reporting, automate routine tasks, and deliver executive-level dashboards.
Collaborate across departments to raise awareness of enterprise IT risk, promote a risk-informed culture, and drive continuous improvement in governance and resiliency practices.