Security Awareness Analyst

The GRC Analyst I is responsible for supporting the mission of the Governance, Risk and Compliance team and the overall security mission of OU Health. This position might be required to support tasks in any of the GRC areas along with tasks in their specifically assigned specialty.

Essential Responsibilities

Responsibilities listed in this section are core to the position. Inability to perform these responsibilities with or without an accommodation may result in disqualification from the position.

• Conducts risk assessments to identify potential threats and vulnerabilities within the organization's operations

• Assist in the development, implementation and revision of corporate policies and procedures to align with best practices and compliance requirements

• Provide audit support by collaborating with internal and external audit teams, providing documentation and evidence as requested to demonstrate compliance and adherence to governance standards

• Prepare and distribute regular reports to management and stakeholders summarizing risk assessment and compliance status

• Deliver training programs to educate employees on cyber security awareness and governance, risk and compliance matters.

• Strive to improve security knowledge through additional training

• Promote a security mindset throughout the organization

General Responsibilities

• Performs other duties as assigned.

Minimum Qualifications

Education Requirements: Bachelor's Degree required.

Experience Requirements

• 0-3 years of experience in Governance, Risk and Compliance or a related IT/IT security role required.

• Previous health care experience preferred.

License/Certification/Registration Requirements: Industry certification in IT/IT Security preferred.

Knowledge/Skills/Abilities Required:

• Basic awareness of GRC functions and areas

• Basic knowledge of security areas and concepts

• Ability to prioritize tasks and meet deadlines

• Ability to communicate effectively both written and verbally

• Strong ethical judgment in ensuring compliance with laws and company policies while maintaining the confidentiality and integrity of sensitive data

• Willingness to learn and take critical feedback

• Proficiency in Microsoft Office suite, particularly in Excel, PowerPoint, and Visio