Healthcare Information Security departments must monitor risk every day. The Lead Governance Risk Compliance Analyst creates audit plans and methodologies, as well as conduct audits and risk assessments. This position requires the ability to analyze audit data, create reports, and track the resolution of negative audit findings.
WHO WE ARE
With 12 ministries and access points across Indiana and Illinois, Franciscan Health is one of the largest Catholic health care systems in the Midwest. Franciscan Health takes pride in hiring coworkers that provide compassionate, comprehensive care for our patients and the communities we serve.
WHAT YOU CAN EXPECT
Schedule and conduct internal and external audits and assessments.
Create audit reports; peer reviews audit reports written by GRC Analysts or other Senior GRC Analysts for accuracy, completeness and other criteria.
Create audit methodologies and templates used by the GRC Team to conduct audits and assessments.
Analyze audit data to identify risks and complex relationships between threats, controls and vulnerabilities.
Formulate prioritized action plans based on audit findings.
Track the resolution of negative audit findings and helps remediate findings where appropriate.
Understand how to translate compliance requirements into technology functions and how to translate compliance requirements into business impacts.
Create and review GRC policies, procedures, and standards.
Develop and deliver information security training, education and awareness content to Franciscan’s workforce.
Mentor GRC Analysts and Sr. Analysts.
Conduct vendor risk assessments, maintain vendor tiering, and review third party contracts for security requirements
ServiceNow Platform Ownership - Maintain workflows and control monitoring in ServiceNow IRM and provide metrics and reporting over remediation efforts
Maintain control mappings across NIST CSF 2.0, HITRUST, HIPPA, and other security frameworks
QUALIFICATIONS
Required Associate's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security) or equivalent experience
Preferred Bachelor's Degree IT-related discipline (e.g. Computer Science, MIS, Information Security)
Preferred Certificate CISSP, SANS GIAC or other industry-recognized or vendor certification
8 years Information security Required
5 years Healthcare, audit or GRC Preferred
TRAVEL IS REQUIRED:
EQUAL OPPORTUNITY EMPLOYER
It is the policy of Franciscan Alliance to provide equal employment to its employees and qualified applicants for employment as otherwise required by an applicable local, state or Federal law.
Franciscan Alliance reserves a Right of Conscience objection in the event local, state or Federal ordinances that violate its values and the free exercise of its religious rights.
Franciscan Alliance is committed to equal employment opportunity.
Franciscan provides eligible employees with comprehensive benefit offerings. Find an overview on the benefit section of our career site, jobs.franciscanhealth.org.
Skills Required
- Associate's Degree in IT-related discipline or equivalent experience
- Bachelor's Degree in IT-related discipline
- CISSP, SANS GIAC, or other industry-recognized certification
- 8 years Information Security experience
- 5 years Healthcare, audit, or GRC experience
- Experience owning and maintaining ServiceNow IRM workflows and control monitoring
- Experience mapping controls across NIST CSF 2.0, HITRUST, and HIPAA
- Experience scheduling and conducting internal and external audits and assessments
- Experience performing vendor risk assessments and reviewing third-party contracts for security requirements
Franciscan Health Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Franciscan Health and has not been reviewed or approved by Franciscan Health.
-
Healthcare Strength — Benefits include medical, dental, and vision with broad network options, plus added savings when using system hospitals, labs, imaging, pharmacies, and physicians. Feedback suggests health coverage is solid, though not best-in-class.
-
Retirement Support — An employer-funded retirement contribution is available alongside 403(b) and 457(b) options with defined eligibility and vesting. Feedback suggests this structure supports long-term savings across many roles.
-
Leave & Time Off Breadth — PTO accrues with service and certain provider roles cite robust allotted time off and CME. Feedback suggests the presence of EAP and additional programs adds breadth to time-away support.
Franciscan Health Insights
What We Do
The Franciscan Alliance healthcare ministry began in Lafayette, Ind., in 1875. Today, Franciscan Alliance is one of the largest Catholic health care systems in the Midwest with 12 hospital campuses in Indiana and Illinois, approximately 20,000 employees and a number of nationally recognized Centers of Health Care Excellence. Hospitals include: Franciscan Health Crown Point, Franciscan Health Michigan City, Franciscan Health Crawfordsville, Franciscan Health Lafayette East, Franciscan Health Indianapolis, Franciscan Health Carmel, Franciscan Health Rensselaer, Franciscan Health Mooresville, Franciscan Health Hammond, Franciscan Health Dyer, Franciscan Health Munster and Franciscan Beacon Hospital in Indiana; and Franciscan Health Olympia Fields in Illinois. For more information, visit FranciscanHealth.org. With more than 850 primary and specialty care providers at over 260 locations in Indiana and Illinois, Franciscan Physician Network is one of the largest and most respected multi-specialty physician networks in the Midwest providing convenient, comprehensive care
