[Hiring] IT Governance Risk Compliance Analyst Lead @Franciscan Alliance, Inc.

Role Description

Healthcare Information Security departments must monitor risk every day. The Lead Governance Risk Compliance Analyst creates audit plans and methodologies, as well as conducts audits and risk assessments. This position requires the ability to analyze audit data, create reports, and track the resolution of negative audit findings.

• Schedule and conduct internal and external audits and assessments.
• Create audit reports; peer review audit reports written by GRC Analysts or other Senior GRC Analysts for accuracy, completeness, and other criteria.
• Create audit methodologies and templates used by the GRC Team to conduct audits and assessments.
• Analyze audit data to identify risks and complex relationships between threats, controls, and vulnerabilities.
• Formulate prioritized action plans based on audit findings.
• Track the resolution of negative audit findings and help remediate findings where appropriate.
• Understand how to translate compliance requirements into technology functions and how to translate compliance requirements into business impacts.
• Create and review GRC policies, procedures, and standards.
• Develop and deliver information security training, education, and awareness content to Franciscan’s workforce.
• Mentor GRC Analysts and Sr. Analysts.
• Conduct vendor risk assessments, maintain vendor tiering, and review third-party contracts for security requirements.
• ServiceNow Platform Ownership - Maintain workflows and control monitoring in ServiceNow IRM and provide metrics and reporting over remediation efforts.
• Maintain control mappings across NIST CSF 2.0, HITRUST, HIPAA, and other security frameworks.

Qualifications

• Required Associate's Degree in IT-related discipline (e.g. Computer Science, MIS, Information Security) or equivalent experience.
• Preferred Bachelor's Degree in IT-related discipline (e.g. Computer Science, MIS, Information Security).
• Preferred Certificate: CISSP, SANS GIAC or other industry-recognized or vendor certification.
• 8 years Information security required.
• 5 years Healthcare, audit or GRC preferred.

Requirements

• Travel is required: Never or Rarely.
• Job Range: IT Governance Risk Compliance Analyst Lead $96,731.58 - $133,005.92.

Benefits

Franciscan provides eligible employees with comprehensive benefit offerings. Find an overview on the benefit section of our career site, jobs.franciscanhealth.org.