Sr GRC Analyst

Job Summary The Sr GRC Analyst plays a key role in supporting the organization’s governance, risk, and compliance program by leading complex risk assessments, advising stakeholders on security and compliance matters, and contributing to risk management strategy. The analyst evaluates security controls, supports audits and regulatory initiatives, and assists in the development and refinement of policies, standards, and procedures. The analyst partners with business, technical, and compliance teams to identify, analyze, and mitigate information security risks while promoting a culture of security and accountability. Through use of GRC tools and continuous professional development, the role strengthens the organization’s security posture and supports strategic risk management initiatives. Minimum Qualifications Bachelor’s Degree in Information Systems or Business Management and at least 5 years of related industry experience or High School Diploma or GED and at least 9 years of related industry experience Certification: Certified Information Privacy Professional, Certified IS Auditor, Certified IS Manager, Certified Information Systems Security Professional, Certified in Risk and Information Systems Control, Global Information Assurance Certification, or HealthCare IS and Privacy Practitioner. Certification must be obtained within 12 months of starting the position Communication Skills Exceptional verbal communication, including public speaking Strong writing and correspondence skills Technical Proficiencies MS Word General personal computer skills Knowledge, Skills, and Abilities Analytical abilities Knowledge of HIPAA Security Rule, HITECH, and Payment Card Industry (PCI) standards Experience with ServiceNow and Power BI (preferred) Experience evaluating, reviewing, and reporting on information systems and applications including EPIC, Windows, Unix, IBM, and Cisco Work Schedule Eligible for telecommute #J-18808-Ljbffr Harris Health System, Inc.