Lead Governance, Risk, and Compliance Analyst

- I will develop and implement Governance, Risk, and Compliance (GRC) strategies, policies, and procedures to guarantee adherence to regulatory standards and industry best practices. - I will lead the assessment and management of organizational risks by conducting risk assessments, identifying gaps, and forming mitigation plans. - I will collaborate with cross-functional teams to integrate GRC principles into our business processes and systems. - I will monitor regulatory changes and industry trends to ensure our organization stays compliant and proactive in addressing emerging risks. - I will provide guidance and training to employees regarding GRC policies, procedures, and best practices. - I will support the execution of audits, assessments, and compliance activities by validating adherence to compliance standards. - I will mentor and coach GRC analysts to facilitate their professional development and growth within our organization. - I will aid in executing and continually improving our company's information security program, focusing on meeting HIPAA-HITECH, state, and GDPR compliance requirements. - I will identify and document cyber risks, manage mitigation efforts, follow up on open security risks, and report issues to leadership. - I will assist with ad-hoc compliance reporting and follow up with customers and/or support partners to ensure all identified vulnerabilities are addressed. - I will provide support to the Information Security Incident Response team during cyber/privacy incidents. - I will verify that information security requirements are incorporated into architectures and new technology projects. - I will ensure that our application and development codebase safeguard the confidentiality, integrity, and availability of our customers' data. - I will evaluate the technical security posture of newly proposed third-party solutions and identify areas for improvement related to third-party risk management to enhance maturity.