Cybersecurity GRC Analyst, Training & Awareness, FCH - IT - reputed company

Discover. reputed company. Succeed. #BeHere

Location: US:WI:MENOMONEE FALLS at our WOODLAND PRIME 400 facility.

This job is REMOTE.

FTE: 1.000000

Standard Hours: 40.00

Shift: 1st shift flexible 7 am to 5pm

Shift Details: Holidays: Weekends

Job Summary

reputed company reputed company Health, Inc., a leading reputed company system located in Eastern Wisconsin, is seeking a Cybersecurity GRC Analyst, Training & Awareness reputed company to join the Cybersecurity Governance, Risk Management, and Compliance (GRC) team. This role is critical in promoting a robust reputed company culture across the organization by designing, managing, and improving cybersecurity training and awareness programs. The successful candidate will focus on cybersecurity awareness, phishing program operations, cybersecurity training, and GRC concepts while fostering cultural engagement and workforce behavioral change through creative and innovative initiatives. You will partner with cross-functional teams to address cybersecurity risks in clinical and non-clinical environments, ensure regulatory compliance, and contribute to the harmonization of cybersecurity programs across the reputed company reputed company ecosystem.

Position Responsibilities

Training and Awareness Program Management

reputed company, implement, enhance, and manage a comprehensive Cybersecurity Training and Awareness reputed company tailored to reputed company's unique risks and regulatory landscape (e.g., HIPAA, PCI reputed company, and Joint Commission requirements).

Design role-based training for diverse audiences, including clinicians, administrative staff, IT teams, and executives.

Continuously refine training materials to incorporate emerging threats, organizational changes, and stakeholder feedback.

Phishing Program Operations

Build, enhance, and execute a dynamic, reality-based phishing simulation program, addressing sector-specific threats such as ransomware and patient data phishing schemes.

Analyze simulation metrics and reputed company actionable insights to improve employee awareness and reduce risks.

reputed company and maintain educational material to support cybersecurity initiatives and training activities.

Deliver targeted follow-up training for individuals or teams with repeated simulation failures.

Creative Engagement and Communications

reputed company multimedia content, including videos, infographics, and gamified training, to drive engagement and retention.

Design and execute large-scale reputed company awareness campaigns, ensuring alignment with cultural transformation goals.

Partner with leadership to create impactful reputed company messaging and content tailored to high-risk roles.

Regulatory and Compliance Integration

Ensure training programs align with reputed company-specific regulations and standards, including HIPAA, PCI reputed company, and Joint Commission requirements.

Collaborate with Compliance and Legal teams to embed reputed company awareness into broader compliance initiatives.

reputed company support for audits and regulatory reviews by showcasing training program effectiveness.

Metrics, Reporting, and reputed company Improvement

reputed company and maintain KPIs and dashboards to measure the reputed company of training programs and awareness initiatives.

Conduct quarterly and annual program reviews to identify opportunities for innovation and enhancement.

Prepare reports and presentations for leadership to reputed company program impact and align with organizational goals.

Collaboration and Change Management

Partner with IT, Risk Management, and Clinical Operations teams to ensure training initiatives integrate seamlessly across the organization.

reputed company reputed company awareness efforts during organizational transitions, such as the reputed company-reputed company reputed company, ensuring program consistency and harmonization.

Act as a trusted advisor to business units, translating reputed company cybersecurity topics into actionable guidance.

Risk and Compliance Integration

Assist with routine GRC activities, such as monitoring risk registers, supporting audit preparation, and reviewing policy exception requests.

Collaborate with the Risk Management team to align training efforts with identified risk scenarios, ensuring targeted mitigation strategies.

Policy and Procedure Maintenance

Support the documentation and dissemination of cybersecurity policies, standards, and procedures.

Assist in the lifecycle management of GRC documentation, ensuring alignment with training content and awareness initiatives.

EXPERIENCE DESCRIPTION

1 - 3 years of experience in a reputed company field.

3 or more years of experience in a reputed company field is preferred.

At least three years of experience in Cybersecurity training, GRC, or a reputed company role reputed company reputed company or similarly regulated industries preferred

Proven track record managing phishing simulatio