Technician, GRC

Jefferson Health Plans • 1100 Virginia Drive, PA

2d • Onsite

About The Position

Responsible for supporting the organization's compliance with regulatory information security requirements and effective management of information security risks. Under direct supervision, this role helps implement and maintain information security policies, participates in risk assessments, and assists with ensuring organizational alignment to legal and regulatory standards. This role contributes to safeguarding company assets by helping identify vulnerabilities, supporting risk mitigation activities, collecting and updating relevant data, and advancing a culture of security awareness and operational resilience within the organization.

Requirements

• Bachelor’s Degree in science, technology, engineering or math discipline or High School Diploma/GED and 3 years preferred experience
• Less than 1 year related work experience

Nice To Haves

• 3 years related work experience

Responsibilities

• Assist in the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience.
• Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Communicate risk assessment results to requestors.
• Follow-up on the results of risk mitigation strategies documenting the response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Use dashboards and reports to measure and monitor risk trends, compliance metrics, and strategic security objectives and communicate results to GRC leadership.
• Retrieve data and manually update KPIs as directed.
• Participate in training and learning opportunities to develop skills and stay current with information security best practices.

Benefits

• medical (including prescription)
• supplemental insurance
• dental
• vision
• life and AD&D insurance
• short- and long-term disability
• flexible spending accounts
• retirement plans
• tuition assistance
• voluntary benefits
• tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level