Bring your drive for excellence, teamwork, and customer commitment to Independence. Join us as we renew and reimagine the future of health care. Together we will achieve our mission to enhance the health and well-being of the people and communities we serve.
We are seeking a highly motivated and experienced Information Security Governance, Risk, and Compliance (GRC) Analyst to lead and support key security and compliance initiatives. This role is critical to maintaining our strong security posture, driving risk management efforts, and ensuring alignment with relevant frameworks and certifications.
Position Summary:
The Lead Information Security GRC Analyst will take ownership of managing and directing major audit and certification programs, such as SOC 2 and HITRUST, while overseeing risk management activities and ensuring compliance with information security frameworks and regulatory requirements. The ideal candidate will bring a strong audit background, ideally from a Big 4 or other leading audit firm, and demonstrate a solid understanding of control design, testing, and compliance best practices.
This role requires strong organizational skills, attention to detail, and the ability to collaborate with internal teams and external auditors. The analyst will act as a hands-on leader, providing expertise and direction while ensuring the successful execution of key compliance and risk initiatives.
Key Responsibilities:
Lead and manage SOC 2 audits, including planning, coordinating with control owners and auditors, and ensuring timely completion of all requirements.
Oversee the HITRUST certification process, collaborating with internal teams and external assessors to maintain compliance and address changes as needed.
Drive risk management efforts including maintaining a risk register.
Ensure compliance with relevant security frameworks and standards, such as NIST CSF and HITRUST, as well as regulatory requirements including HIPAA/HITECH and PCI DSS.
Act as the primary point of contact for auditors, subject matter experts, and control owners, fostering collaboration and resolving issues as they arise.
Report on the status of audits, certifications, and risk management efforts to leadership, highlighting risks and recommending solutions.
Qualifications:
Bachelor's degree in Information Security, IT, Business Administration, or a related field; relevant certifications (e.g., CISA, CISSP, HITRUST CCSFP) are a plus.
3+ years of experience in information security, IT audit, or GRC roles, with a strong preference for candidates with Big 4 or large firm audit experience.
Strong understanding of audit processes, control design, testing, and compliance frameworks.
Familiarity with security frameworks (NIST CSF, HITRUST, ISO 27001) and regulatory requirements (HIPAA, PCI DSS, GDPR).
Experience with GRC tools and platforms, and an ability to drive risk management processes.
Exceptional organizational, communication, and problem-solving skills.
Self-motivated and confident in leading complex projects with minimal supervision.
Hybrid
Independence has implemented a “Hybrid” model which consists of Associates working in the office 3 days a week (Tuesday, Wednesday & Thursday) and remotely 2 days a week (Monday & Friday). This role is designated as a role that fits into the “Hybrid” model. While associates may work remotely on our designated remote days, the work must be performed in the Tri-State Area of Delaware, New Jersey or Pennsylvania.
IBX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to their age, race, color, religion, sex, national origin, sexual orientation, protected veteran status, or disability.
Must have an Android or iOS device which is compatible with the free Microsoft Authenticator app.
...company and is one of the leading demolition specialists in the country. We are accepting applications for an experienced Class B Roll Off Driver to operate a tandem axle roll off can truck, primarily in the Proctor, WV area. This is a full-time position for a project...
...Staff Management Group is seeking a Scale Operator for our client in Randolph, NJ. Please read the ENTIRE job description and ALL of the job requirements BEFORE applying for this position. Schedule: ~1st Shift: 7:30AM - 4PM ~ Plus Overtime Pay Rate...
...ease. If youve ever walked through an automatic door, stayed in a hotel, or gone through passport control, youve probably used one of... ...to your work habits? Do you know about architectural product sales, and are you ready to be part of an energized team? If so, we have...
...One of the leading dermatology practices in the country is seeking a Dermatology Physician Assistant or Nurse Practitioner to join their talented team. ~ New grad or experienced candidates welcome About the Group: Provides medical, cosmetic, and surgical...
...medical center, Local Market, and regional committees (e.g., peer groups, safety, disaster, infection control, interior design, and recycling committees).+ Ensures legal and regulatory compliance by: ensuring compliance with EVS departmental policies/procedures relative...