Associate Analyst Governance Risk and Compliance
Jefferson Health
Job Title: Associate Analyst Governance Risk and Compliance
Company: Jefferson Health
Key Responsibilities
- Responsible for ensuring adherence to regulatory information security requirements.
- Manages information security risks effectively.
- Implements robust compliance frameworks.
- Develops and enforces information security policies.
- Conducts risk assessments.
- Ensures alignment with legal and regulatory standards.
- Safeguards organizational assets by identifying vulnerabilities, mitigating and quantifying risks, and advancing downtime resilience.
- Fosters a culture of compliance through security awareness.
Job Duties
- Assist in the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools.
- Apply established enterprise-wide information security policies, standards, and procedures.
- Assist in conducting risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
- Gather data to inform the team on security posture, resilience gaps, and emerging threats.
- Assist in the prioritization and deployment of risk mitigation strategies using risk quantification methodologies.
- Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
- Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk, and compliance.
- Contribute to the development of key performance indicators and risk quantification.
- Participate in training and learning opportunities to develop skills and stay current with information security best practices.
Requirements & Tech Stack
- GRC (Governance, Risk, and Compliance)
- Risk Quantification Methodologies
- Information Security Policies
- Risk Assessments
- Security Awareness Training
- Business Resilience Training
Qualifications
- Bachelor’s Degree in a related field.
- Less than 1 year related work experience.
Physical Demands: Lift and carry 25 lbs., frequent sitting/standing, frequent keyboard use.