> Markdown version of [/jobs/ext/2307633-sr-it-is-grc-consultant-information-security-policy-mgt](https://www.wearedevelopers.com/jobs/ext/2307633-sr-it-is-grc-consultant-information-security-policy-mgt). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr IT/IS GRC Consultant - Information Security Policy Mgt. - - **Company:** HCSC, L.P. - **Location:** Richardson, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $112,200.0 - $202,600.0 - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Database Design, Systems Analysis, Information Technology Audit, Software Engineering, Information Technology - **Published:** August 30, 2026 - **Apply:** https://dejobs.org/x/x/97DF3E2629C544D78214738F058DB62F/job/ ## About the Role * Bachelor Degree and 5 years of IT / IS work experience with a broad range of exposure to systems analysis, application development, database design and administration. * Understanding of IT / IS concepts and how to artciulate those in terms of risk.Can recommend and develop strategic responses to issues and risks. * Interpret internal or external business issues and concepts and and can translate those into IT concepts that must be addressed via policy. * Understanding of key IT / IS laws and regulations, such as the Health Insurance Portability and Accountability Act, as well as governance and compliance frameworks (e.g. NIST, COBIT, ITIL, HITRUST). * Understanding of and experience with audit and compliance controls. This could include previous IT auditing experience and / or technical controls implementation, as well as the ability to respond apprpriately to audit and assessment findings. * Initiate and invoke creativity to solve complex problems; takes an "outside -in"perspective to identify innovative solutions. * Collaborate well with individuals across the business and IT, as well as at all levels of the organization. * Verbal and written communication skills, including the ability to articulate complex concepts to various technical and non-technical audience. * Experience with and understanding of overall GRC concepts. * Work independently, with guidance in only the most complex situations. * May lead functional teams and / or projects. Preferred Job Qualifications: * Bachelor Degree in Computer Science, Information Systems, or other related field. * Experience with a GRC solution would be preferred. ## Description This position is responsible for serving as a thought leader in the governance, risk and compliance space; planning, designing, enforcing and auditing information technology and information security policies, standards and procedures which safeguard the integrity of and access to enterprise systems, files and data elements; analyzing, tracking and acting on information technology or information security policy exceptions, audits and assessments; maintaining knowledge of changing technologies, and provides recommendations for adaptation of new technologies, processes or policies; recognizing and identifying potential areas where existing information technology or information security policies, standards and procedures require change, or where new ones need to be developed, especially as a result of future business expansion and technology advances; providing management with analysis via risk assessments and briefings / reports to advise them of critical information technology / information security issues that may affect the company's business objective and / or compliance; collaborating with and feeds it risk information into the enterprise risk management program; evaluating and recommending information technology and information security products, services and/or processes to reduce risk and maintain compliance with applicable policies, mandates, laws and regulations; implementing the activities associated with the information technology and information security awareness programs and provides education and training on information technology and information security policies, standards and practices; performing control assessments and works with appropriate subject matter experts (SME's) to document remediation plans; serving as a project lead and mentor to junior GRC team members. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Building Moduliths That Last: Patterns for Sustainable Module Integration](https://www.wearedevelopers.com/videos/100325-building-moduliths-that-last-patterns-for-sustainable-module-integration) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Detecting Money Laundering with AI](https://www.wearedevelopers.com/videos/111-detecting-money-laundering-with-ai) ## Related Articles - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)