IT GRC Lead Analyst

Westfield Health

IT GRC Lead Analyst at Westfield, leading IT governance, risk management, and compliance initiatives. Requires expertise in regulatory compliance and mentorship in a hybrid office setting.

Posted 6/29/2026full-timeWestfield Center • Ohio • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the development, execution, and continuous improvement of the enterprise IT Governance, Risk, and Compliance (GRC) program, frameworks, and operating model.
Serve as the organization's subject matter expert for IT governance, risk management, compliance, and control oversight.
Lead enterprise technology risk assessments and provide risk-based recommendations aligned with business objectives and risk appetite.
Drive the maturity of risk management practices through governance enhancements, process optimization, and industry best practices.
Oversee compliance with regulatory requirements, industry standards, and internal policies, ensuring effective implementation of controls and monitoring mechanisms.
Establish and maintain IT control frameworks, including ITGCs, cybersecurity controls, and key risk indicators (KRIs).
Lead control assessments, testing, continuous monitoring, and remediation efforts to strengthen the organization's control environment.
Serve as the primary liaison for internal and external audits, regulatory examinations, and issue remediation governance.
Lead third-party technology risk management activities, including vendor assessments and ongoing risk oversight.
Champion the implementation, optimization, and automation of GRC processes and technologies to improve efficiency and effectiveness.
Develop and deliver executive-level reporting, dashboards, and insights on risk, compliance, audit results, and remediation activities.
Lead cross-functional GRC initiatives, influence strategic decision-making, and mentor team members to foster a culture of risk awareness and continuous improvement.

Requirements

What you’ll need

7+ years of experience in IT Governance, Risk, and Compliance, Information Security, IT Audit, or related disciplines.
Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field.
Licenses and Certifications: CISSP, CISA, CRISC, CISM, CGEIT.

Benefits

Comp & perks

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk AssessmentsControl TestingProcess OptimizationCybersecurity ControlsKey Risk Indicators

Soft Skills

LeadershipMentoringStrategic Decision-Making

Certifications

CISSPCISACRISCCISMCGEIT