AMN Healthcare Hiring for IT GRC Analyst Job at Remote Full Time

The IT Governance, Risk and Compliance (GRC) Analyst is a member of the IT Compliance & Risk team that supports companywide risk and governance programs. The IT GRC Analyst will be responsible for managing company technology compliance requirements, performing control reviews against industry standards, identifying and mitigating technology risks, and supporting the completion of various IT governance initiatives. The IT GRC Analyst will interact with business partners, technology team members, and external partners to help accomplish our team, department, and company goals. The position will report to the Director, Compliance and Risk within the I&T Department.

Job Tasks:

• Assist in the management of company compliance requirements such as Sarbanes Oxley, data privacy laws including HIPAA and state laws, and industry certifications.
• Develop and maintain technology related policies, procedures, and standards that address requirements relate to strategies, regulations, business & technology risks, and industry standards.
• Execute control reviews across technology and business teams to address risk and compliance against various industry and technology frameworks (i.e., SSAE18 SOC2; NIST Cybersecurity Framework, COBIT, and ISO27001).
• Identify, quantify, track, and lead mitigation of risks and control exceptions and communicate results to department leadership.
• Oversee and execute control activities such as periodic system access reviews.
• Perform third party risk assessments on vendors and external business partners.
• Partner with team members to fulfill customer technology and information security related information requests (i.e., RFPs and RFIs).
• Contribute to the creation, hydration, and monitoring of key department metrics.
• Contribute to the completion of IT Governance deliverables supporting IT Financial Management, IT Strategic Planning, and reporting to executives and senior leaders.

Minimum Education/Certifications:

• Bachelor’s Degree

Preferred Education/Certifications:

• Master’s Degree
• CISA, CRISC, CISM, CISSP, and/or CGEIT

Minimum Experience:

• 4+ years of experience in IT risk management, IT audit, or information security activities
• Excellent written and verbal communication skills

Preferred Experience:

• Experience in Sarbanes Oxley requirements
• Experience in applying IT control & security frameworks such as SSAE18 SOC2, COBIT, NIST Cyber Security Framework, IS027001
• Knowledgeable in PII, PHI, and PCI compliance requirements
• Experience in data analytics activities

Respect Passion Continuous Improvement Trust Customer Focus Innovation

AMN Healthcare is an EEO/AA/Disability/Protected Veteran Employer

We encourage minority and female applicants to apply

AMN Healthcare is committed to fostering and maintaining a diverse team that reflects the communities we serve. Our commitment to the inclusion of many different backgrounds, experiences and perspectives enables our innovation and leadership in the healthcare services industry.

We value professionalism in everything we do – this includes the professional presence we project as we interact with internal and external customers.

Job Type: Full-time

Schedule:

• Monday to Friday

Work Location: Remote