Governance Risk & Compliance Analyst Senior

Location: Santa Barbara, CA, United States; Remote

Cottage Health seeks a Governance Risk & Compliance Analyst Senior for their CH ITS Security department. This position will lead security governance, risk management, and compliance activities across the organization. This role partners with IT, business, and vendor stakeholders to identify security risks, ensure regulatory compliance, and strengthen Cottage Health's overall security program and risk management capabilities. Key responsibilities include:

• Lead and maintain security governance, risk, and compliance initiatives.
• Conduct security risk assessments and manage the enterprise Security Risk Register.
• Support HIPAA, PCI, and other regulatory compliance activities.
• Assess third-party vendors and monitor compliance with security requirements.
• Develop security metrics and report risk and compliance status to leadership.
• Create and maintain security policies, standards, and governance processes.
• Recommend risk mitigation strategies and drive remediation efforts.

About Us