Governance Risk and Compliance Analyst Intermediate

Market Street - 4411, United StatesRemoteFull-time5+ yrs experiencePosted 1mo ago

Job description

Information Systems

Excited to grow your career?
We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!
Our people make all the difference in our success.

The Governance, Risk & Compliance (GRC) Analyst - Intermediate will collaborate with process owners, internal auditors, external auditors, and other stakeholders in order to assist in reviewing, monitoring, and resolving cybersecurity risk. This includes helping the organization manage HITRUST, HIPAA and NIST Common Security Framework (CSF) audits and attestations. By supporting the implementation of internal and external assessments, responding to and managing the full lifecycle of compliance audits, and ensuring compliance with existing and emerging regulations and standards including SOC2, ISO 27001, PCI-DSS, SOX, and other GRC activities, the Principal GRC Analyst will also contribute to managing the organization’s IT compliance program.

Essential Job Function:

Lead the execution and reporting of outcomes derived from Third Party Risk Assessments.
Manage the completion of risk and vulnerability assessments, validation testing, compliance reviews, and audits in accordance with NIST and HITRUST standards.
Manage and monitor a central repository for all security risks and audit evidence.
Maintain security standards, policies, and practices on an annual basis to make sure they meet organizational and regulatory requirements.
Manage a security awareness training program in order to educate associates about security compliance standards, risk management practices, and ethical behavior.
Collaborate with legal and compliance teams to ensure policies and security controls align with regulatory requirements.
Conduct internal audits to assess the effectiveness of security controls and identify areas for improvement.
Performs other duties as assigned.

Education:

Required: Bachelor's Degree and/or equivalent experience.

Experience:

Required: 5 years

Licensure/Certification/Listing:

Required: Certified Information Systems Auditor (CISA) - Obtain within 12 months.

Work Shift :

Days/No Weekends (United States of America)

On Call Required

FTE:

Job Type:

Full Time (40 Hours/Week)

Job details are sourced from the employer's original posting.

Open job posting

About the company

Cone Health

Recognized for Excellence in Neurology Moses H. Cone Memorial Hospital ranks in the top 10 percent of the nation for medical excellence in neurological care, according to CareChex . That means you can trust us to provide advanced inpatient services, protect patient safety, and offer care with lower-than-average rates of complications. Cone Health has been named a Blue Distinction Center+ for Spine Surgery by Blue Cross and Blue Shield of North Carolina (BCBSNC). Hospitals with this designation demonstrate expertise in cervical and lumbar fusion, cervical laminectomy and lumbar laminectomy/discectomy procedures, resulting in fewer patient complications and hospital readmissions compared to other hospitals. Our outstanding services include stroke care at Moses Cone Hospital and other Cone Health facilities, which have earned numerous recognitions for helping stroke patients achieve better-than-average outcomes.

View all Cone Health jobs

Industry: Healthcare
Open roles: 702