[Hiring] IS Security GRC Platform Engineer @Ochsner Health

Role Description

The Cybersecurity GRC Engineer supports Ochsner Health’s Cybersecurity Governance, Risk, and Compliance program by serving as a technical and functional resource for the organization’s GRC application, Onspring, and related GRC functions. This role is responsible for:

• Administering, maintaining, and improving Onspring workflows, forms, dashboards, reports, risk records, findings, control mappings, assessment processes, evidence repositories, security exception workflows, and user support activities.
• Supporting integration and coordination between Onspring and related enterprise applications, reporting tools, workflow systems, and business processes.
• Working closely with Information Services, Cybersecurity, Compliance, Privacy, Audit, Legal, third-party risk, and business stakeholders.
• Supporting audit readiness, risk management, compliance tracking, remediation management, executive reporting, and continuous improvement of the Cybersecurity GRC program.

Qualifications

• Required: High school diploma or equivalent.
• Preferred: Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, Healthcare Administration or a related field.

Requirements

• Required: 2 years information technology experience with master’s degree; OR 4 years information technology experience with bachelor’s degree; OR 6 years information technology experience with associate’s degree; OR 8 years of information technology experience.
• Preferred: 5 to 10 years of related information technology, cybersecurity, governance, risk, compliance, audit, security operations, application administration, or platform administration experience in a regulated industry.
• Preferred: Experience supporting cybersecurity GRC functions in healthcare, federal, government, commercial, or other highly regulated environments.
• Preferred: Experience with GRC and workflow platforms such as Onspring, Archer, MetricStream, Xacta, CSAM, ServiceNow, JIRA, Confluence, Remedy, or similar platforms.

Knowledge Skills and Abilities (KSAs)

• Working knowledge of GRC platform administration, preferably Onspring.
• Experience with GRC platforms and related workflow tools.
• Strong knowledge of cybersecurity and compliance frameworks and standards.
• Experience supporting audit readiness, evidence collection, control testing, and remediation tracking.
• Ability to translate regulatory, audit, technical, and business requirements into repeatable GRC workflows.
• Experience coordinating with auditors, vendors, technology teams, and business owners.
• Ability to support third-party risk management activities.
• Working knowledge of identity and access management and related security controls.
• Strong verbal, written, diagrammatic, and executive communication skills.
• Strong organization, documentation, follow-through, analytical, and continuous service improvement skills.
• Ability to work independently and as part of a cross-functional team.
• Ability to work a flexible schedule, including occasional after-hours, weekends, and holidays.

Job Duties

• Serves as a technical and functional administrator for the Cybersecurity GRC application, Onspring.
• Maintains and enhances Onspring workflows, forms, dashboards, reports, and user access.
• Supports integration and coordination between Onspring and related applications.
• Designs, configures, tests, documents, and deploys new or enhanced GRC workflows.
• Maintains cybersecurity framework mappings and control documentation.
• Supports audit readiness activities by coordinating evidence collection and tracking findings.
• Partners with various stakeholders to improve GRC processes.
• Develops and maintains executive-level reports, dashboards, metrics, and status updates.
• Creates and maintains process documentation, workflow diagrams, and training materials.
• Coordinates with vendors or internal application teams to troubleshoot platform issues.
• Identifies continuous improvement opportunities to standardize data quality and improve reporting reliability.

Physical and Environmental Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Light Work - Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force frequently.
• Light Work: Requires walking or standing to a significant degree, or sitting most of the time but entails pushing and/or pulling of arm or leg controls.

Are you ready to make a difference? Apply Today!

Ochsner Health does not consider an individual an applicant until they have formally applied to the open position on this careers website.