Analyst Governance Risk and Compliance

About the role

Contributes to the effective management of information security and resilience risks through domain expertise in areas such as regulatory compliance, risk management, security data engineering, or organizational resilience. This position applies information security policies and best practices, performs risk assessments, and ensures alignment with regulatory requirements. Uses data driven decision making to protect assets by identifying vulnerabilities, measuring risks, improving resilience, and promoting compliance through security awareness.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Requirements

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 3 years related work experience
• Physical Demands: Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Schedule

Workday shift (United States of America)

Benefits

• Medical (including prescription) insurance
• Supplemental insurance
• Dental insurance
• Vision insurance
• Life and AD&D insurance
• Short- and long-term disability
• Flexible spending accounts
• Retirement plans
• Tuition assistance
• Voluntary benefits providing group rates on insurance and discounts
• Tuition discounts at Thomas Jefferson University after one year of full‑time service or two years of part‑time service
• Medical (including prescription) insurance available to all colleagues, including those who work less than part‑time (per diem colleagues, adjunct faculty, and Jeff Temps)