Associate Governance, Risk and Compliance (GRC) Analyst - Information Technology

This job was posted by https://www.kansasworks.com : For more information, please see: https://www.kansasworks.com/jobs/13696471 The Associate Governance, Risk and Compliance (GRC) analyst works across IT, departments, vendors, and leadership to evaluate and monitor compliance with security frameworks and regulatory obligations, including NIST 800-53, CIS Controls, ISO 27001, PCI, HIPAA, CJIS, and data privacy. The role performs audits, reviews controls and evidence, documents findings, and coordinates and tracks corrective recommendations and actions to improve the countys overall risk management and compliance program. The Associate GRC Analyst also supports the organizations governance, risk, and compliance activities by helping to maintain security policies and track risks. Governance and policy administration - Maintain current knowledge of evolving compliance requirements and best practices. - Review policies, procedures, technical controls, and user practices for alignment with applicable standards. - Assist with policy development, control documentation, and security awareness efforts. Compliance monitoring and audit support - Conduct security and compliance audits for systems, processes, and departments subject to PCI, HIPAA, and CJIS requirements. - Conduct audit of ERP operations, ensuring alignment with compliance standards. - Track deadlines for audits, reviews, certifications, and remediation items. - Collect, validate, and maintain audit evidence for internal and external assessments. - Prepare and communicate audit findings, remediation plans, and status reports for leadership. - Coordinate with IT staff, departmental users, vendors, and security partners to resolve deficiencies. - Monitor corrective action plans and follow up on remediation activities. Risk and control analysis - Identify compliance gaps, control weaknesses, and potential security risks. - Track control assessment and risk mitigation efforts. - Support incident response, risk assessments, and annual compliance reviews as needed. - Assist in documenting security systems. - Participate in organizational emergency response planning activities - Cross training with other systems to serve as back-up as needed. - Other duties as needed Applicants have rights under Federal Employment Laws. Please find more information under the following link. Apply for a Job | Sedgwick County, Kansas{target="_blank" rel="noopener"}