IT Governance Risk Compliance Analyst Lead

Healthcare Information Security departments must monitor risk every day. The Lead Governance Risk Compliance Analyst creates audit plans and methodologies, as well as conduct audits and risk assessments. This position requires the ability to analyze audit data, create reports, and track the resolution of negative audit findings.

WHO WE ARE
With 12 ministries and access points across Indiana and Illinois, Franciscan Health is one of the largest Catholic health care systems in the Midwest. Franciscan Health takes pride in hiring coworkers that provide compassionate, comprehensive care for our patients and the communities we serve.

WHAT YOU CAN EXPECT

• Schedule and conduct internal and external audits and assessments.

• Create audit reports; peer reviews audit reports written by GRC Analysts or other Senior GRC Analysts for accuracy, completeness and other criteria.

• Create audit methodologies and templates used by the GRC Team to conduct audits and assessments.

• Analyze audit data to identify risks and complex relationships between threats, controls and vulnerabilities.

• Formulate prioritized action plans based on audit findings.

• Track the resolution of negative audit findings and helps remediate findings where appropriate.

• Understand how to translate compliance requirements into technology functions and how to translate compliance requirements into business impacts.

• Create and review GRC policies, procedures, and standards.

• Develop and deliver information security training, education and awareness content to Franciscan’s workforce.

• Mentor GRC Analysts and Sr. Analysts.

• Conduct vendor risk assessments, maintain vendor tiering, and review third party contracts for security requirements

• ServiceNow Platform Ownership - Maintain workflows and control monitoring in ServiceNow IRM and provide metrics and reporting over remediation efforts

• Maintain control mappings across NIST CSF 2.0, HITRUST, HIPPA, and other security frameworks

QUALIFICATIONS

• Required Associate's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security) or equivalent experience

• Preferred Bachelor's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security)

• Preferred Certificate CISSP, SANS GIAC or other industry-recognized or vendor certification

• 8 years Information security Required

• 5 years Healthcare, audit or GRC Preferred

EQUAL OPPORTUNITY EMPLOYER

It is the policy of Franciscan Alliance to provide equal employment to its employees and qualified applicants for employment as otherwise required by an applicable local, state or Federal law.

Franciscan Alliance reserves a Right of Conscience objection in the event local, state or Federal ordinances that violate its values and the free exercise of its religious rights.

Franciscan Alliance is committed to equal employment opportunity.

Franciscan provides eligible employees with comprehensive benefit offerings. Find an overview on the benefit section of our career site, jobs.franciscanhealth.org.