Senior GRC Analyst

Job not on LinkedIn

🔥 0 minutes ago

⚜️ Louisiana – Remote

⚜️ Louisiana – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blue Cross and Blue Shield of Louisiana

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1934

🏥 Healthcare

🛡️ Insurance

⚕️ Healthcare Insurance

Healthcare • Insurance • Healthcare Insurance

Blue Cross and Blue Shield of Louisiana is an independent licensee of the Blue Cross Blue Shield Association, offering a range of health insurance products and services in the state of Louisiana. The company provides health, dental, and travel insurance options, including Medicare Advantage plans such as HMO and PPO. They focus on delivering comprehensive healthcare coverage through various plans to meet varying customer needs, while partnering with doctors, hospitals, and clinics to ensure quality care and support. Additionally, the company emphasizes wellness programs, cost-saving opportunities, and accessibility for its members.

📋 Description

• Lead validation, assessment, and authorization processes for IT systems to meet cybersecurity and risk requirements • Collaborate with Cybersecurity and IT professionals on governance, risk management, compliance, and GRC support objectives • Develop and implement annual strategic plans and Board-level reporting • Maintain cybersecurity, control, and risk management frameworks and a protected control library • Track laws and regulations and map requirements to security and cybersecurity frameworks • Design security controls aligned with organizational risk appetite and business objectives • Develop and maintain IT and cybersecurity governance documentation • Define security-control metrics and key performance indicators • Deliver cybersecurity awareness and training activities, including phishing simulations and remote events • Assess the technical environment against cybersecurity frameworks and develop remediation efforts • Identify and assess risks, security-architecture gaps, and security risk management plans • Prepare risk assessments for business, technical, audit, senior-management, and Board audiences • Recommend and coordinate security initiatives to mitigate risks • Provide enterprise cybersecurity risk-management guidance and education • Participate in acquisitions using risk-management practices • Develop continuous control-monitoring schedules and oversee security-control assessments • Monitor control effectiveness, efficiency, and tolerance alignment • Liaise with auditors, consultants, IT management, cybersecurity personnel, and other stakeholders • Track and manage IT audit findings through resolution • Support internal and external audit activities with control documentation • Lead process analysis, development, and improvement efforts • Develop, test, and deliver solutions, reporting, and relationship-management support • Serve as a liaison between clients and internal or external stakeholders • Provide GRC team support and subject-matter expertise • Interview process owners and review process designs to understand business requirements • Mentor and lead operational activities of junior team members • Perform other job-related duties as assigned

🎯 Requirements

• Bachelor's degree in IT, Audit, and/or related fields required • Four years of related experience may be used in lieu of a Bachelor's degree • Four years of relevant, specialized experience required • Highly developed proficiency across multiple Governance, Risk, and Compliance disciplines • Experience in and working knowledge of at least two: technology risk management; governance documentation management; cybersecurity awareness and training; IT/security controls and regulatory compliance; auditing, preferably IT audit; technical IT infrastructure management; cybersecurity architecture, incident, and response • Excellent analytical, critical-thinking, communication, marketing, and consulting skills • Hands-on technical expertise in cybersecurity, IT infrastructure, cloud technologies, or application development highly desirable • Ability to work under minimal supervision and exercise independent judgment in a remote environment • Multiple cybersecurity, IT, security governance, information systems audit, compliance, risk management, or computer networking trainings and certifications preferred • Ability to comprehend, document, calculate, visualize, and analyze • Residency in or relocation to Louisiana preferred • Successful background and pre-employment drug screening required before hire • Individuals convicted of a felony involving dishonesty or breach of trust must obtain written consent from their state insurance commissioner to work in the insurance industry

🏖️ Benefits

• Resources to live well and be healthy • Continued learning and skill development • Professional growth opportunities • Opportunity to serve local communities • Reasonable accommodations for individuals with disabilities • Smoke- and tobacco-free workplace • Pre-employment drug screening after an offer • Background and pre-employment screening after an offer