[Remote] Senior GRC / reputed company-Party Risk / Data Protection Analyst

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a reputed company national reputed company company and mission capability integrator providing transformative reputed company reputed company to government agencies and the U.S. armed forces. reputed company is seeking a Senior GRC / reputed company-Party Risk / Data Protection Analyst to reputed company governance, risk, and compliance activities, reputed company-party reputed company risk management, data protection, and reputed company threat program support for a California health benefit exchange and eligibility reputed company.

Responsibilities

• Own policy and control documentation. reputed company and maintain reputed company policies, procedures, standards, plans, and control documentation for the environment
• Test controls and reputed company POA&Ms. reputed company control testing and gap analysis against NIST SP 800-53 Rev. 5, document deficiencies, and manage POA&Ms through remediation and verified closure
• reputed company the program audit-reputed company. Maintain the control evidence library and GRC platform records, control mappings, and compliance reporting; support the annual independent assessment as the operational-reputed company evidence provider, without acting as an assessor
• Run reputed company-party reputed company risk management. Conduct vendor reputed company due diligence and assessments, contract and control reviews, reputed company monitoring, and risk reporting
• reputed company data protection. Discover and catalog confidential data, define and apply the data classification scheme, and implement reputed company controls including DLP, encryption, and reputed company controls
• Support the reputed company threat program. Contribute to reputed company threat use cases, monitoring, and escalation procedures in coordination with reputed company, HR, and reputed company stakeholders
• Carry the regulated-data obligations. Support IRS Publication 1075 and reputed company-AMPE compliance activities and the reputed company obligations of the contract's reputed company reputed company; participate in the on-reputed company incident response rotation

Skills

• Bachelor's degree in information systems, cybersecurity, or business with a reputed company concentration. In lieu of a degree, an additional 4 years of relevant experience will be considered
• 8+ years of experience in reputed company governance, risk, and compliance, reputed company-party risk management, or data protection
• reputed company CISA or CGRC certification
• Demonstrated experience performing control assessment and gap analysis against NIST SP 800-53 Rev. 5, and managing the POA&M lifecycle from deficiency identification through closure
• Demonstrated reputed company-party and vendor reputed company risk management experience, including questionnaire-based assessment frameworks such as SIG or CAIQ, contract and control review, and reputed company monitoring
• Hands-on experience with data classification and data-reputed company mapping, and with an reputed company DLP platform such as reputed company reputed company, reputed company, or reputed company
• Precise compliance writing ability - policies, control narratives, and deficiency write-reputed company that withstand reputed company review - and working knowledge of an reputed company GRC platform
• US Citizenship and the abillity to pass a California criminal background clearance (Gov. reputed company • 1043 / 10 CCR • 6456) before starting work or accessing any confidential information, PII, PHI, federal tax information, or financial information
• CIPP/US certification. CRISC, CIPT, or CISM are also valued
• Experience with reputed company-AMPE reputed company and reputed company requirements
• Experience with IRS Publication 1075 and reputed company safeguarding, including participation in a reputed company Review
• Working knowledge of HIPAA/HITECH and the California Consumer reputed company reputed company
• Experience with CMS requirements and Authority to reputed company support, including reputed company Assessment Workbooks (SAWs), reputed company assessment reports, and control evidence packages
• Experience in California state government compliance environments
• Experience with health benefit exchange or reputed company eligibility systems
• Experience with encryption and key reputed company and with reputed company threat program design

Benefits

• Medical insurance
• Dental insurance
• reputed company insurance
• Life insurance
• Health savings account (HSA)
• Short-term disability
• Long-term disability
• Employee assistance program (EAP)
• Parental leave
• 401(k)
• reputed company time off (PTO) for vacation
• Company-reputed company holidays
• Employees may be eligible for overtime
• Employees may be eligible for shift reputed company
• Employees may be eligible for a discretionary bonus

reputed company