Role Description Join a dynamic team as a GRC Analyst, where your expertise in IT compliance and risk management directly contributes to organizational success. This remote opportunity is ideal for professionals driven by curiosity, critical thinking, and independence. You'll play a pivotal role in supporting SOX compliance, User Access Reviews, and IT General Controls, while working in a fast-paced, growth-focused environment that rewards initiative and innovation. - Lead and execute SOX compliance activities to ensure regulatory adherence - Conduct thorough User Access Reviews (UARs) across IT systems and applications - Perform comprehensive IT General Controls (ITGC) testing and reviews - Support general IT compliance, governance, risk, and controls initiatives - Identify, investigate, and resolve potential compliance issues proactively - Collaborate with cross-functional teams to implement best-practice controls - Challenge assumptions and drive process improvements through critical analysis Qualifications - Demonstrated experience with SOX compliance activities - Hands-on expertise in User Access Reviews and ITGC testing/reviews - Strong background in IT Compliance, Governance, Risk, and Controls - Superior analytical and problem-solving skills - Ability to work independently with minimal supervision - Proactive, inquisitive mindset-comfortable asking clarifying questions and investigating issues Requirements - Direct IT Compliance experience (strongly preferred over pure audit backgrounds) - Solid understanding of risk, controls, and governance processes - Candidates with audit backgrounds considered if they display strong compliance acumen Benefits - 100% remote work-enjoy flexibility and work-life balance - Exposure to high-impact projects and evolving technologies - Collaborative culture that values curiosity, autonomy, and critical thought - Opportunities for professional growth in IT Governance, Risk, and Compliance

Role Description Healthcare Information Security departments must monitor risk every day. The Lead Governance Risk Compliance Analyst creates audit plans and methodologies, as well as conducts audits and risk assessments. This position requires the ability to analyze audit data, create reports, and track the resolution of negative audit findings. - Schedule and conduct internal and external audits and assessments. - Create audit reports; peer review audit reports written by GRC Analysts or other Senior GRC Analysts for accuracy, completeness, and other criteria. - Create audit methodologies and templates used by the GRC Team to conduct audits and assessments. - Analyze audit data to identify risks and complex relationships between threats, controls, and vulnerabilities. - Formulate prioritized action plans based on audit findings. - Track the resolution of negative audit findings and help remediate findings where appropriate. - Understand how to translate compliance requirements into technology functions and how to translate compliance requirements into business impacts. - Create and review GRC policies, procedures, and standards. - Develop and deliver information security training, education, and awareness content to Franciscan’s workforce. - Mentor GRC Analysts and Sr. Analysts. - Conduct vendor risk assessments, maintain vendor tiering, and review third-party contracts for security requirements. - ServiceNow Platform Ownership - Maintain workflows and control monitoring in ServiceNow IRM and provide metrics and reporting over remediation efforts. - Maintain control mappings across NIST CSF 2.0, HITRUST, HIPAA, and other security frameworks. Qualifications - Required Associate's Degree in IT-related discipline (e.g. Computer Science, MIS, Information Security) or equivalent experience. - Preferred Bachelor's Degree in IT-related discipline (e.g. Computer Science, MIS, Information Security). - Preferred Certificate: CISSP, SANS GIAC or other industry-recognized or vendor certification. - 8 years Information security required. - 5 years Healthcare, audit or GRC preferred. Requirements - Travel is required: Never or Rarely. - Job Range: IT Governance Risk Compliance Analyst Lead $96,731.58 - $133,005.92. Benefits Franciscan provides eligible employees with comprehensive benefit offerings. Find an overview on the benefit section of our career site, jobs.franciscanhealth.org.

• Advisors are deployed on project-based engagements when client needs match their expertise. • Joining the network does not guarantee placement; it provides access to opportunities as they arise. • Work with Hedge Fund and Family Office clients to provide expert advice. • Lead the firm's vulnerability management program and conduct annual cybersecurity assessments.

• Lead real-time monitoring, triage, and analysis of complex security events, providing verifiable assessments of threats and incident severity. • Engineer and automate advanced detection use cases across DigitalOcean's cloud and corporate environments, leveraging deep knowledge of adversary TTPs to design and implement scalable alerting solutions. • Develop, track, and report on key metrics for security monitoring effectiveness and incident response performance, using data to drive improvements. • Own and evolve the security monitoring program strategy, ensuring alignment with evolving threat landscapes and business priorities. • Work closely with Infrastructure Security Engineers to identify log sources, integrate, and maintain data pipelines (e.g., log sources, forwarders, parsing, enrichment). • Perform proactive threat hunting and hypothesis-driven investigations and investigate anomalous activity to uncover hidden or emerging threats within DigitalOcean’s environments. • Mentor and guide lower level analysts, reviewing escalated incidents and providing technical leadership during incident response. • Coordinate threat analysis using historical data and architecture diagrams to identify attack vectors. • Collaborate with multiple teams to close monitoring gaps and improve overall security. • Optimize security tools and processes to reduce false positives, improve detection fidelity, and automate response workflows where appropriate. • Lead the creation and maintenance of detailed playbooks, runbooks, and documentation to standardize detection and response efforts.