When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves. We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future.

Summary

In this role, you will serve as a trusted expert in Governance, Risk, and Compliance (GRC), directly contributing to the organization’s security strategy and enhancing Vizient’s overall security posture. You will provide guidance and support to ensure the organization’s information systems align with compliance, privacy, and resiliency requirements. This position requires an understanding of both legacy systems and emerging technologies to ensure a secure and compliant operating environment.

The GRC Senior Compliance Analyst partners with cross-functional teams and leadership to assess, design, and maintain policies and controls, supporting compliance obligations under standards and regulations such as the Sarbanes-Oxley Act (SOX), the Health Information Portability and Accountability Act (HIPAA), and the Securities and Exchange Commission (SEC).

Responsibilities

• Identify strengths and weaknesses in the security program as they relate to privacy, security, business resiliency, and compliance frameworks.

• Analyze findings, document and report program gaps, and recommend mitigation strategies to compliance leadership.

• Provide oversight to ensure security and technology teams maintain up-to-date configuration documentation for systems and processes.

• Maintain rigorous oversight of security systems and configuration administration to reduce enterprise risk.

• Partner with compliance leadership to perform ongoing compliance and security assessments and recommend annual strategic technology directives.

• Serve as a liaison with internal and external auditors to maintain and implement controls for compliance with privacy and regulatory requirements.

• Develop and utilize automation tools (e.g., Power Automate) and data visualization platforms (e.g., Power BI) to streamline reporting, automate routine tasks, and build dashboards.

• Apply Python programming skills to build and deploy AI models for data analytics and visualization.

• Support responses to SEC-related audit inquiries and documentation requests.

• Collaborate across departments to elevate awareness of compliance risks and drive continuous improvement of the security program.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field preferred.

• 5 or more years of relevant experience in IT compliance, risk management, or information security.

• Strong understanding of compliance frameworks and regulations, including SOX, HIPAA, and SEC standards.

• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).

• Intermediate to expert-level skills in Python for AI data analytics model development and reporting.

• Experience using Power Automate, Power BI, or similar tools to create process automations and dashboards.

• Strong analytical, documentation, and problem-solving skills with the ability to communicate technical information clearly to diverse audiences.

• Proven ability to work independently and collaboratively across teams to implement effective compliance and security initiatives.

#LI-JB1

Estimated Hiring Range:

This position is also incentive eligible.

Vizient has a comprehensive benefits plan! Please view our benefits here:

http://www.vizientinc.com/about-us/careers

Equal Opportunity Employer:   Females/Minorities/Veterans/Individuals with Disabilities

The Company is committed to equal employment opportunity to all employees and applicants without regard to race, religion, color, gender identity, ethnicity, age, national origin, sexual orientation, disability status, veteran status or any other category protected by applicable law.