Principal Security GRC Analyst

As a member of the Cyber Security team at Providence, you will play a crucial role in safeguarding all information related to caregivers, affiliates, and confidential business information. Your responsibilities will include: - Identifying, developing, and implementing enterprise-wide security programs and projects with budget, resource plans, and work-plans - Translating strategic direction into action plans and milestones - Collaborating with multiple pillars to enhance standardization and efficiency of the GRC function - Managing, coaching, mentoring, and developing the functional team - Implementing higher-level security requirements and integrating security programs - Leading end-to-end Cybersecurity Internal Audits - Supporting IT GRC initiatives globally - Designing GRC frameworks - Maintaining updated knowledge in the field of GRC and industry best practices Your work week will involve: - Collaborating with business leaders to evaluate security needs and impacts on business processes - Driving implementation of framework, policies, and other security requirements - Conducting gap analysis and implementing Standards Frameworks - Developing and revising Policies, Standards, Processes, and guidelines for the enterprise - Completing security reviews, attestations, and assessments - Creating Audit Calendar and performing internal audits and security risk assessments - Prioritizing work, delegating tasks, and effectively communicating with stakeholders - Promoting and raising awareness of Cyber-Security programs within the organization We are looking for candidates who possess: - A 4-year University (Bachelors) degree in Computer Science, Information Security, Cyber Security, or related field - Minimum 8 years of experience in an Information Security/GRC role - Minimum 5 years of experience in IT Risk Management Role/GRC role - Preferred 3 years of experience in Healthcare, Pharma, or Bio-Technology organization - Experience with managing a GRC tool support life cycle - Strong written and oral communication skills - Adaptable to shifting priorities and timelines - Ability to work independently and in collaboration with cross-functional teams - Prioritization and execution skills in a high-pressure environment - Preferred knowledge of Information Security standards such as ISO/IEC 27001, NIST CSF, HIPAA, PCIDSS, and CIS Controls As a member of the Cyber Security team at Providence, you will play a crucial role in safeguarding all information related to caregivers, affiliates, and confidential business information. Your responsibilities will include: - Identifying, developing, and implementing enterprise-wide security programs and projects with budget, resource plans, and work-plans - Translating strategic direction into action plans and milestones - Collaborating with multiple pillars to enhance standardization and efficiency of the GRC function - Managing, coaching, mentoring, and developing the functional team - Implementing higher-level security requirements and integrating security programs - Leading end-to-end Cybersecurity Internal Audits - Supporting IT GRC initiatives globally - Designing GRC frameworks - Maintaining updated knowledge in the field of GRC and industry best practices Your work week will involve: - Collaborating with business leaders to evaluate security needs and impacts on business processes - Driving implementation of framework, policies, and other security requirements - Conducting gap analysis and implementing Standards Frameworks - Developing and revising Policies, Standards, Processes, and guidelines for the enterprise - Completing security reviews, attestations, and assessments - Creating Audit Calendar and performing internal audits and security risk assessments - Prioritizing work, delegating tasks, and effectively communicating with stakeholders - Promoting and raising awareness of Cyber-Security programs within the organization We are looking for candidates who possess: - A 4-year University (Bachelors) degree in Computer Science, Information Security, Cyber Security, or related field - Minimum 8 years of experience in an Information Security/GRC role - Minimum 5 years of experience in IT Risk Management Role/GRC role - Preferred 3 years of experience in Healthcare, Pharma, or Bio-Technology organization - Experience with managing a GRC tool support life cycle - Strong written and oral communication skills - Adaptable to shifting priorities and timelines - Ability to work independently and in collaboration with cross-functional teams - Prioritization and execution skills in a high-pressure environment - Preferred knowledge of Information Security standards such as ISO/IEC 27001, NIST CSF, HIPAA, PCIDSS, and CIS Controls