Cottage Health seeks a Governance Risk & Compliance Analyst Senior for their CH ITS Security department. This position will lead security governance, risk management, and compliance activities across the organization. This role partners with IT, business, and vendor stakeholders to identify security risks, ensure regulatory compliance, and strengthen Cottage Health's overall security program and risk management capabilities. Key responsibilities include:
- Lead and maintain security governance, risk, and compliance initiatives.
- Conduct security risk assessments and manage the enterprise Security Risk Register.
- Support HIPAA, PCI, and other regulatory compliance activities.
- Assess third-party vendors and monitor compliance with security requirements.
- Develop security metrics and report risk and compliance status to leadership.
- Create and maintain security policies, standards, and governance processes.
- Recommend risk mitigation strategies and drive remediation efforts.
All job qualifications listed indicate the minimum level necessary to perform this job proficiently.
LEVEL OF EDUCATION
Minimum: Bachelor's Degree in Computer Science or related field; or equivalent experience (8 years)
CERTIFICATIONS, LICENSES, REGISTRATIONS
Minimum: One or more of the following industry certifications: Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP),Certified in Risk and Information Systems Control (CRISC), SANS Security Awareness Professional, CompTIA Security+, CompTIA CySA+ Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), GIAC Security Essentials (GSEC), Certified Cloud Security Professional (CCSP), Systems Security Certified Practitioner (SSCP), Advanced in AI Audit (AAIA), Certified Data Privacy Solutions Engineer (CDPSE), Certified in the Governance of Enterprise IT (CGEIT), Certified Cybersecurity Operations Analyst (CCOA)
TECHNICAL REQUIREMENTS
Minimum: Working knowledge of HIPAA, PCI, and cybersecurity governance frameworks
YEARS OF RELATED WORK EXPERIENCE
Minimum: 3-5 years of IT audit, risk management, or information security compliance experience, operating independently with limited supervision
Skills Required
- Bachelor's Degree in Computer Science or related field, or equivalent experience (8 years)
- One of the following certifications: CISA, CISM, CISSP, CRISC, SANS Security Awareness Professional, CompTIA Security+, CompTIA CySA+, CEH, OSCP, GSEC, CCSP, SSCP, AAIA, CDPSE, CGEIT, CCOA
- Working knowledge of HIPAA, Meaningful Use, and Payment Card Industry (PCI)
- 3-5 years of IT audit, risk management, or information security compliance experience
Cottage Health Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Cottage Health and has not been reviewed or approved by Cottage Health.
-
Fair & Transparent Compensation — Pay is considered competitive for the area and often described as fair or among the best locally. Noted examples of meaningful raises over time reinforce the perception of market-aligned compensation.
-
Healthcare Strength — Health coverage is described as very good, with comprehensive medical, dental, and vision alongside robust mental health resources. Wellness supports like an EAP, onsite fitness/yoga, and incentives enhance overall value.
-
Wellbeing & Lifestyle Benefits — Distinctive programs such as substantial down‑payment assistance, workforce‑affordable housing, wellness dollars, and onsite childcare broaden total rewards beyond core insurance. These offerings are positioned to help offset local cost pressures and support daily life.
Cottage Health Insights
What We Do
Mission Statement: To provide superior health care for and improve the health of our communities through a commitment to our core values of excellence, integrity, and compassion. Founded in 1888, the not-for-profit Santa Barbara Cottage Hospital has been serving the community for more than 125 years. Cottage Health, formed in 1996 as the not-for-profit parent organization of Santa Barbara Cottage Hospital and its affiliated Cottage Children’s Medical Center, Cottage Rehabilitation Hospital, Goleta Valley Cottage Hospital, and Santa Ynez Valley Cottage Hospital, is guided by a volunteer board of directors from the greater Santa Barbara community and provides the residents of the Central and South Coast with exemplary health care, continuous improvements in medical practice, and a commitment to our communities.
.png)
