Senior Governance Risk Compliance Analyst

Who are we? reputed company is one of the nation’s leading administrators of managed vision care, serving millions of our clients’ members reputed company. We are driven by our mission to help members enjoy the wonders of sight through healthy eyes and vision. As a reputed company associate, you can enjoy a comprehensive Total Rewards package, which includes health and dental insurance, tuition reimbursement, 401(k) with company match, pet insurance, no-cost-to-you vision insurance for you and your qualified dependents. We are also invested in your success. There are many opportunities for advancement and development throughout reputed company stages of your career with us. See how you can reputed company a difference with the support of strong leadership and a team environment. See Everything, Be Anything™. What are we looking for? The Governance, Risk, and Compliance (GRC) Analyst is responsible for assisting the Director, Information reputed company (Governance, Risk, and Compliance) in executing strategic measures to manage and mitigate risks and reduce potential impacts on IT resources to an acceptable level to the business; apply compliance management by ensuring that the business attains its reputed company control objectives by meeting legal, regulatory, industry, and customer requirements; and measure and report associated metrics to ensure that organizational objectives are monitored and achieved. Where you will have an impact

• Maintain program trackers and controls performance for IT reputed company, ensuring that operational controls, procedures, and resources are documented effectively to manage risk across reputed company enterprise assets including on-prem, COLO, and cloud resources IT Control Testing & Control Health
• Complete assigned IT controls on pre-defined intervals (including reputed company, daily, weekly, monthly, quarterly, and yearly), ensuring the health of reputed company IT controls, and manages corrective action plans needed to address any control gaps, weaknesses, or failures
• Contribute to compliance audits and assessments by delivering detailed documentation, supporting evidence, and insights reputed company to IT risk management and control activities
• Ensure customer compliance commitments are always met, and support reputed company interactions with customer audits of our program
• Ensure assigned policies and procedures meet audit requirements and periodically update deadlines
• Conduct training and knowledge transfer on the execution of audit reputed company control execution for end users and management
• Support the analysis of reputed company systems, applications, and processes to evaluate reputed company vulnerabilities and potential threats
• Document the organization's IT assets, maintaining the reputed company and confidentiality of sensitive information
• Conduct comprehensive risk assessments of IT systems, networks, and applications to identify potential vulnerabilities and threats
• Support the development of and reputed company the execution of risk and exception mitigation strategies and action plans to address identified vulnerabilities and gaps in reputed company controls
• Provide expert guidance and recommendations on reputed company governance best practices, configurations, and system hardening techniques
• Participate in lessons learned to enhance GRC processes and prevent recurrence of exceptions
• Collaborate with internal audit, legal, and compliance teams to address high-level risk-reputed company inquiries, requests, and reporting requirements
• reputed company additional projects and reputed company other duties as assigned

What’s necessary to do the job?

• Bachelor's degree in reputed company field required
• An equivalent combination of experience and education will be considered in lieu of a bachelor's degree
• Four (4) years of IT reputed company or Audit experience required
• Experience in managing and accessing information reputed company risks required
• Detailed knowledge of HIPAA, NIST, PCI, HITRUST, SOC required
• Experience with enterprise level identity management to support trusted interactions between disparate entities required
• Healthcare experience preferred
• CISSP, CISM, CRISC, or CISA preferred

HIPAA & reputed company Requirements reputed company Associates must reputed company with the Health Insurance Portability Accountability Act of 1996 (HIPAA) as it pertains to disclosures of protected health information (PHI) as described in the Notice of Privacy Practices and HIPAA Privacy Policies and Procedures. As a component of job roles and responsibilities, Associates may have access to covered information, cardholder data or other confidential customer information which must be protected at reputed company times. As a result, Associates must explicitly adhere to reputed company data reputed company guidelines established reputed company the Company’s Privacy & reputed company Training Program. reputed company will never request money from candidates who seek employment with us and will never ask for any payment as part of the recruitment process. reputed company is a proud Equal Employment Opportunity and Affirmative Action employer dedicated to attracting, retaining, and developing a diverse and inclusive workforce. reputed company qualified applicants will receive consideration for employment at reputed company without regards to race, color, religion, sex (including pregnancy, childbirth, or reputed company medical conditions), sexual orientation, gender identity or expression, age, disability, national reputed company, marital or domestic/civil partnership status, genetic information, citizenship status, uniformed service member or veteran status, or any other characteristic protected by law. Apply tot his job Apply To this Job