Information Security Governance, Risk and Compliance Analyst II

Saint Luke's is seeking an Information Security Governance, Risk and Compliance Analyst II to support its information security program. The role evaluates security controls, leads risk assessments and audits, manages remediation activities, assesses vendors, and supports security awareness and compliance initiatives.

Responsibilities:

• Leads internal and external security reviews, audits, and controls evaluations
• Prepares security awareness training and phishing campaigns to enable a security aware organization
• Provides guidance and training for and mentors junior staff
• Identify gaps in security design or controls and implement recommendations for remediation or mitigating controls
• Supports the development, and report on security metrics
• Performs vendor information security assessments
• Ensure alignment of information security controls and processes with industry standards
• Lead IT Risk Assessment projects
• Perform ongoing monitoring of third-party vendors
• Collaborate with various key stakeholders to gain a common understanding of identified deficiencies/gap
• Analyze compliance requirements

Requirements:

• Equivalent experience can be used in lieu of degree
• 3-5 years
• Bachelor's Degree