Sign upLog in
See more jobs

Governance, Risk and Compliance Analyst Senior

Cone Health
    • Autofill and Review
    30+ days ago

    Job Description

    Information Systems

    Excited to grow your career?

    We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!

    Our people make all the difference in our success.

     

    The Governance, Risk & Compliance (GRC) Analyst - Senior will collaborate with process owners, internal auditors, external auditors, and other stakeholders in order to assist in reviewing, monitoring, and resolving cybersecurity risk. This includes helping the organization manage HITRUST, HIPAA and NIST Common Security Framework (CSF) audits and attestations. By supporting the implementation of internal and external assessments, responding to and managing the full lifecycle of compliance audits, and ensuring compliance with existing and emerging regulations and standards including SOC2, ISO 27001, PCI-DSS, SOX, and other GRC activities, the Principal GRC Analyst will also contribute to managing the organization’s IT compliance program.

     


    Essential Job Function:

    • Lead the execution and reporting of outcomes derived from Third Party Risk Assessments.
    • Manage the completion of risk and vulnerability assessments, validation testing, compliance reviews, and audits in accordance with NIST and HITRUST standards.
    • Manage and monitor a central repository for all security risks and audit evidence.
    • Maintain security standards, policies, and practices on an annual basis to make sure they meet organizational and regulatory requirements.
    • Manage a security awareness training program in order to educate associates about security compliance standards, risk management practices, and ethical behavior.
    • Collaborate with legal and compliance teams to ensure policies and security controls align with regulatory requirements.
    • Conduct internal audits to assess the effectiveness of security controls and identify areas for improvement.
    • Performs other duties as assigned.


    Education:

    • Required: Bachelor's Degree and/or equivalent experience.


    Experience:

    • Required: 7 years


    Licensure/Certification/Listing:

    • Required: Certified Information Security Manager (CISM) certification.

    Work Shift :

    Days/No Weekends (United States of America)

    On Call Required

    No

    FTE:

    1

    Job Type:

    Full Time (40 Hours/Week)

    Numbers & Facts

    Location

    Skills

    • Analysis Skillsunmatched
    • Auditingunmatched
    • CISM - Certified Information Security Managerunmatched
    • Computer Securityunmatched
    • External Auditunmatched
    • HIPAA (Health Insurance Portability and Accountability Act)unmatched
    • ISO (International Organization for Standardization)unmatched
    • Internal Auditunmatched
    • Internet Securityunmatched
    • Maintain Complianceunmatched
    • Organizational Development/Managementunmatched
    • PCI-DSSunmatched
    • Regulationsunmatched
    • Regulatory Complianceunmatched
    • Regulatory Requirementsunmatched
    • Riskunmatched
    • Risk Analysisunmatched
    • Risk Managementunmatched
    • Sarbanes-Oxley Act (SOX)unmatched
    • Security Analysisunmatched
    • Security Auditingunmatched
    • Security Complianceunmatched
    • Security Monitoringunmatched
    • Training Programunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched
    • Validation Testingunmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder