[Hiring] Senior GRC Analyst @Blue Cross and Blue Shield of Louisiana

Role Description

Leads the validation, assessment, and authorization processes necessary to assure that existing and new information technology (IT) systems meet the organization's cybersecurity and risk requirements.

Qualifications

• Bachelor's in IT, Audit, and/or related fields required
• Four years of related experience can be used in lieu of a Bachelor’s degree
• 4 years of relevant, specialized experience and highly developed proficiency within multiple disciplines including Governance, Risk, and Compliance required
• Requires excellent analytical, critical thinking, communication, marketing, and consulting skills
• Hands-on technical expertise in cybersecurity, IT infrastructure (networking, server management, etc.), cloud technologies, or application development is highly desirable
• Requires experience in and working knowledge of at least 2 of the following disciplines:
  • Technology Risk Management
  • Governance Documentation Management (i.e. Policies, Processes, and Procedures)
  • Cybersecurity Awareness and Training
  • Management of IT/Security Controls & Ensuring Compliance with Legal and Regulatory Requirements
  • Auditing (Preferably IT Audit)
  • Technical Management of IT Infrastructure (e.g. networking, server administration, cloud technologies, etc.)
  • Cybersecurity Architecture, Incident, and Response
• Multiple Cybersecurity, IT or Security Governance, Information Systems Audit, Compliance, Risk Management, or computer networking trainings and certifications are preferred (e.g. CISA, CRISC, CGEIT, CISM, CISSP, CompTIA Sec+, CIA, CRMA, COSO/ERM, etc.)

Requirements

• Collaborates and consults with a team of Cybersecurity and IT professionals to accomplish multiple objectives as determined by management
• Maintains risk alignment to the company’s chosen cybersecurity framework
• Develops comprehensive risk assessments for reporting to multiple audiences including business leaders, technical personnel, audit personnel, senior management, and the board of directors
• Develops and maintains continuous control monitoring schedules and oversees security control assessments to verify effectiveness and efficiency
• Serves as liaison to auditors, consultants, IT management, cybersecurity personnel, and other personnel as needed to ensure organizational compliance with applicable rules, laws, and regulations

Benefits

• Resources to live well and be healthy
• Opportunities for continued learning and professional growth
• Support for serving local communities