Senior Governance Risk & Compliance Analyst

Community Memorial Healthcare

Governance Risk & Compliance Analyst managing enterprise-wide security governance and compliance programs at Cottage Health. Identifying and mitigating security risks while protecting valuable organizational assets.

Posted 7/23/2026full-timeRemote • California • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Governance, Risk Management, and Compliance programs, with a strong focus on regulatory requirements and risk mitigation strategies. Holds relevant certifications and possesses extensive experience in IT audit and information security compliance.

Highest-signal resume keywords

Security GovernanceRisk ManagementCompliance ProgramsIT Audit ExperienceRegulatory Requirements Interpretation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentSecurity ComplianceInformation SecurityRegulatory ComplianceRisk Mitigation

Soft Skills

Independent JudgmentAnalytical ThinkingProblem Solving

Certifications & Qualifications

Certified Information Security Auditor (CISA)Certified Information Security Manager (CISM)Certified Information Systems Security Professional (CISSP)Certified in Risk and Information Systems Control (CRISC)CompTIA Security+

Industry Keywords

HIPAAPayment Card Industry (PCI)Meaningful UseInformation Security ComplianceCybersecurity

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Independently administers and governs enterprise-wide Security Governance, Risk and Compliance programs to identify and mitigate security risks and protect valuable information and assets within the organization.
Exercises independent judgment in interpreting regulatory requirements, evaluating security risk, and recommending compliance and remediation actions that support business objectives.

Requirements

What you’ll need

Bachelor's Degree in Computer Science or related field; or equivalent experience (8 years).
One of the following: Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), SANS Security Awareness Professional, CompTIA Security+, CompTIA CySA+ Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), GIAC Security Essentials (GSEC), Certified Cloud Security Professional (CCSP), Systems Security Certified Practitioner (SSCP), Advanced in AI Audit (AAIA), Certified Data Privacy Solutions Engineer (CDPSE), Certified in the Governance of Enterprise IT (CGEIT), Certified Cybersecurity Operations Analyst (CCOA).
Working knowledge or HIPAA, Meaningful Use and Payment Card Industry (PCI).
3-5 years of IT audit, risk management, or information security compliance experience, operating independently with limited supervision.

Benefits

Comp & perks

Pay for non-physician positions is determined based on related years of experience and internal equity.
Eligible employees may also receive additional forms of compensation, including shift differentials, on-call pay, incentive pay, and bonus opportunities, where applicable.
Manager and above positions may participate in Cottage Health’s annual management incentive program.
For more information on our comprehensive Total Rewards offerings, please visit https://cottagehealth.org/careers/total-rewards.