Overview: The IS Security GRC Platform Engineer serves as the technical and functional administrator for the Cybersecurity GRC application Onspring and related GRC functions. This role administers, maintains, and enhances Onspring workflows, forms, dashboards, reports, risk records, findings, control mappings, assessment processes, evidence repositories, and security exception workflows, while providing user support.

Responsibilities

Manage Onspring configuration, dashboards, data quality, notifications, and access control, and integrate Onspring with other enterprise applications, reporting tools, workflow systems, and enterprise data sources.
Design, test, deploy, and improve new or enhanced GRC workflows to support cybersecurity risk management, audit readiness, control assessments, remediation tracking, and executive reporting.
Maintain mappings to cybersecurity frameworks (NIST, HIPAA, ISO/IEC 27001, HITRUST, PCI DSS, SOC 2, etc.) and ensure alignment with regulatory requirements.
Support audit readiness activities by coordinating evidence collection, documenting controls, tracking findings, supporting corrective actions, and monitoring remediation.
Collaborate with Cybersecurity, Information Services, Audit, Compliance, Privacy, Legal, third-party risk, and business stakeholders to improve GRC processes and visibility.
Produce executive-level reports and dashboards on risk posture, remediation progress, and GRC program health.
Develop documentation, process guides, playbooks

About the role

Position: IS Security GRC Platform Engineer (Remote) Employer: Ochsner Health

Overview: The IS Security GRC Platform Engineer serves as the technical and functional administrator for the Cybersecurity GRC application Onspring and related GRC functions. This role administers, maintains, and enhances Onspring workflows, forms, dashboards, reports, risk records, findings, control mappings, assessment processes, evidence repositories, and security exception workflows, while providing user support.

Responsibilities

Manage Onspring configuration, dashboards, data quality, notifications, and access control, and integrate Onspring with other enterprise applications, reporting tools, workflow systems, and enterprise data sources.
Design, test, deploy, and improve new or enhanced GRC workflows to support cybersecurity risk management, audit readiness, control assessments, remediation tracking, and executive reporting.
Maintain mappings to cybersecurity frameworks (NIST, HIPAA, ISO/IEC 27001, HITRUST, PCI DSS, SOC 2, etc.) and ensure alignment with regulatory requirements.
Support audit readiness activities by coordinating evidence collection, documenting controls, tracking findings, supporting corrective actions, and monitoring remediation.
Collaborate with Cybersecurity, Information Services, Audit, Compliance, Privacy, Legal, third-party risk, and business stakeholders to improve GRC processes and visibility.
Produce executive-level reports and dashboards on risk posture, remediation progress, and GRC program health.
Develop documentation, process guides, playbooks

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: IS Security GRC Platform Engineer

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Remote-first

DevOps Engineering Fintech Remote Europe Startups